- Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-10.2.z] - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-10.2.z] - Resolves: RHEL-232863 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-10.2.z] - Resolves: RHEL-244470 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-10.2.z] - Resolves: RHEL-245372 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-10.2.z] - Resolves: RHEL-247859 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-10.2.z] - Resolves: RHEL-248770 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-10.2.z] - Bump version to 3.2.0-9 - Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-10.2.z] - Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-10.2.z] - Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre- authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-10.2.z] - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN cache is disabled. - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral - Resolves: RHEL-92054 - Memory leak in roles_cache_create_object_from_entry [rhel-10] - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10] - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with world readable permission - Resolves: RHEL-107035 - CWE-532 Created user password hash available to see in audit log - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password changed by administrator - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS access and error logs - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] - Resolves: RHEL-5117 - ns-slapd crash in dbmdb_import_prepare_worker_entry() - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's log msg info - Resolves: RHEL-35241 - ns-slapd crashes in referral mode - Resolves: RHEL-61327 - Incomplete messages about replication in the errors log. - Resolves: RHEL-61353 - dbscan on replication changelog does not display MOD_TYPE - Resolves: RHEL-62874 - dsidm: issue when renaming users - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached inactivity limit fails with error - Resolves: RHEL-67003 - dsconf backend replication monitor fails if replica id starts with 0 - Resolves: RHEL-67006 - dsconf utility should let you configure the "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug- in - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole filter rewriter. - Resolves: RHEL-67022 - Password modify extended operation should skip password policy checks when executed by root DN - Resolves: RHEL-70117 - Unify how group description can be added to a new group in WebUI and CLU - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in Directory Server - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or a number, not 'NoneType' - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree- rename-switch" from DS-12 - Resolves: RHEL-79080 - Json option does not work with "dsidm account get- by-dn" command - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS access and error logs - Resolves: RHEL-80253 - RHDS hangs when having online backup running together with automember_rebuild task executing - Resolves: RHEL-80497 - Can't rename users member of automember rule [rhel-10] - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are provided - Resolves: RHEL-83850 - mdb database statistics don't work - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role create-nested" - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role create-filtered" - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" - Resolves: RHEL-86314 - dsidm failing with error "argument must be a string or a number" - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit, service and posixgroup - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j option - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper deletion message, but role is still present - Resolves: RHEL-86785 - dscontainer: support loading custom schema - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp 00007fed321fe100 error 6 in liblmdb.so.0.0.0 - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if replicas are busy [rhel-10] - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] - Resolves: RHEL-95761 - Improve error message when bulk import connection is closed - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or directory: '/usr/sbin/dsctl' - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN cache is disabled. - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral - Resolves: RHEL-92054 - Memory leak in roles_cache_create_object_from_entry [rhel-10] - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10] - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with world readable permission - Resolves: RHEL-107035 - CWE-532 Created user password hash available to see in audit log - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password changed by administrator - Bump version to 3.2.0-9 - Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-10.2.z] - Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-10.2.z] - Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre- authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-10.2.z] - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-10.2.z] - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-10.2.z] - Resolves: RHEL-232863 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-10.2.z] - Resolves: RHEL-244470 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-10.2.z] - Resolves: RHEL-245372 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-10.2.z] - Resolves: RHEL-247859 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-10.2.z] - Resolves: RHEL-248770 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-10.2.z] - Bump version to 3.2.0-9 - Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-10.2.z] - Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-10.2.z] - Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre- authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-10.2.z] - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN cache is disabled. - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral - Resolves: RHEL-92054 - Memory leak in roles_cache_create_object_from_entry [rhel-10] - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10] - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with world readable permission - Resolves: RHEL-107035 - CWE-532 Created user password hash available to see in audit log - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password changed by administrator - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS access and error logs - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] - Resolves: RHEL-5117 - ns-slapd crash in dbmdb_import_prepare_worker_entry() - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's log msg info - Resolves: RHEL-35241 - ns-slapd crashes in referral mode - Resolves: RHEL-61327 - Incomplete messages about replication in the errors log. - Resolves: RHEL-61353 - dbscan on replication changelog does not display MOD_TYPE - Resolves: RHEL-62874 - dsidm: issue when renaming users - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached inactivity limit fails with error - Resolves: RHEL-67003 - dsconf backend replication monitor fails if replica id starts with 0 - Resolves: RHEL-67006 - dsconf utility should let you configure the "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug- in - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole filter rewriter. - Resolves: RHEL-67022 - Password modify extended operation should skip password policy checks when executed by root DN - Resolves: RHEL-70117 - Unify how group description can be added to a new group in WebUI and CLU - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in Directory Server - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or a number, not 'NoneType' - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree- rename-switch" from DS-12 - Resolves: RHEL-79080 - Json option does not work with "dsidm account get- by-dn" command - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS access and error logs - Resolves: RHEL-80253 - RHDS hangs when having online backup running together with automember_rebuild task executing - Resolves: RHEL-80497 - Can't rename users member of automember rule [rhel-10] - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are provided - Resolves: RHEL-83850 - mdb database statistics don't work - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role create-nested" - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role create-filtered" - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" - Resolves: RHEL-86314 - dsidm failing with error "argument must be a string or a number" - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit, service and posixgroup - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j option - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper deletion message, but role is still present - Resolves: RHEL-86785 - dscontainer: support loading custom schema - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp 00007fed321fe100 error 6 in liblmdb.so.0.0.0 - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if replicas are busy [rhel-10] - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] - Resolves: RHEL-95761 - Improve error message when bulk import connection is closed - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or directory: '/usr/sbin/dsctl' - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN cache is disabled. - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral - Resolves: RHEL-92054 - Memory leak in roles_cache_create_object_from_entry [rhel-10] - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10] - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with world readable permission - Resolves: RHEL-107035 - CWE-532 Created user password hash available to see in audit log - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password changed by administrator - Bump version to 3.2.0-9 - Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-10.2.z] - Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-10.2.z] - Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre- authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-10.2.z] - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-10.2.z] - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-10.2.z] - Resolves: RHEL-232863 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-10.2.z] - Resolves: RHEL-244470 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-10.2.z] - Resolves: RHEL-245372 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-10.2.z] - Resolves: RHEL-247859 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-10.2.z] - Resolves: RHEL-248770 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-10.2.z] - Bump version to 3.2.0-9 - Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-10.2.z] - Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-10.2.z] - Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre- authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-10.2.z] - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN cache is disabled. - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral - Resolves: RHEL-92054 - Memory leak in roles_cache_create_object_from_entry [rhel-10] - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10] - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with world readable permission - Resolves: RHEL-107035 - CWE-532 Created user password hash available to see in audit log - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password changed by administrator - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS access and error logs - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] - Resolves: RHEL-5117 - ns-slapd crash in dbmdb_import_prepare_worker_entry() - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's log msg info - Resolves: RHEL-35241 - ns-slapd crashes in referral mode - Resolves: RHEL-61327 - Incomplete messages about replication in the errors log. - Resolves: RHEL-61353 - dbscan on replication changelog does not display MOD_TYPE - Resolves: RHEL-62874 - dsidm: issue when renaming users - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached inactivity limit fails with error - Resolves: RHEL-67003 - dsconf backend replication monitor fails if replica id starts with 0 - Resolves: RHEL-67006 - dsconf utility should let you configure the "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug- in - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole filter rewriter. - Resolves: RHEL-67022 - Password modify extended operation should skip password policy checks when executed by root DN - Resolves: RHEL-70117 - Unify how group description can be added to a new group in WebUI and CLU - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in Directory Server - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or a number, not 'NoneType' - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree- rename-switch" from DS-12 - Resolves: RHEL-79080 - Json option does not work with "dsidm account get- by-dn" command - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS access and error logs - Resolves: RHEL-80253 - RHDS hangs when having online backup running together with automember_rebuild task executing - Resolves: RHEL-80497 - Can't rename users member of automember rule [rhel-10] - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are provided - Resolves: RHEL-83850 - mdb database statistics don't work - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role create-nested" - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role create-filtered" - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" - Resolves: RHEL-86314 - dsidm failing with error "argument must be a string or a number" - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit, service and posixgroup - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j option - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper deletion message, but role is still present - Resolves: RHEL-86785 - dscontainer: support loading custom schema - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp 00007fed321fe100 error 6 in liblmdb.so.0.0.0 - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if replicas are busy [rhel-10] - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] - Resolves: RHEL-95761 - Improve error message when bulk import connection is closed - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or directory: '/usr/sbin/dsctl' - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN cache is disabled. - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral - Resolves: RHEL-92054 - Memory leak in roles_cache_create_object_from_entry [rhel-10] - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10] - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with world readable permission - Resolves: RHEL-107035 - CWE-532 Created user password hash available to see in audit log - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password changed by administrator - Bump version to 3.2.0-9 - Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-10.2.z] - Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-10.2.z] - Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre- authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-10.2.z] - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to latest upstream version. - Update spec file and resolve a build issue (BZ 2113091). - Switch to SPDX licensing. - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Hard link manpages to avoid duplication - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use SPDX-format license tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-81948) - Fix order of parsing port/controller properies in nmcli (RHEL-80273) - Improve interface activation logic (RHEL-80157) - Fix WireGuard IPv6 firewall rules (RHEL-79975) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105) - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105) - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-81948) - Fix order of parsing port/controller properies in nmcli (RHEL-80273) - Improve interface activation logic (RHEL-80157) - Fix WireGuard IPv6 firewall rules (RHEL-79975) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105) - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105) - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Upgrade to 1.2.30 - Declare supports-safe-private-file-access (RHEL-140608) - Upgrade to 1.2.29 - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307) - Support leftprotoport and rightprotoport options. (RHEL-130888) - Fix error on duplicate key 'phase2alg'. (RHEL-128213) - Fix import connection with RSA key. (RHEL-125174) - Fix potentional crash in malformed items import - Fix a regression in nm-auto-defaults=yes - Symetric import/export with nm-auto-default (RHEL-119641) - Esp param properly exported (RHEL-119653) - Correct leftid export when it contains @ - Update to later upstream release to address regressions (RHEL-56551) - Add support for nm-auto-defaults (RHEL-85768) - Update to 1.2.26 release - Add support for leftsubnets/rightsubnets (RHEL-56553) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.2.24 release - Fix improper escaping of Libreswan configuration (CVE-2024-9050) - Upgrade to 1.2.30 - Declare supports-safe-private-file-access (RHEL-140608) - Upgrade to 1.2.29 - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307) - Support leftprotoport and rightprotoport options. (RHEL-130888) - Fix error on duplicate key 'phase2alg'. (RHEL-128213) - Fix import connection with RSA key. (RHEL-125174) - Fix potentional crash in malformed items import - Fix a regression in nm-auto-defaults=yes - Symetric import/export with nm-auto-default (RHEL-119641) - Esp param properly exported (RHEL-119653) - Correct leftid export when it contains @ - Update to later upstream release to address regressions (RHEL-56551) - Add support for nm-auto-defaults (RHEL-85768) - Update to 1.2.26 release - Add support for leftsubnets/rightsubnets (RHEL-56553) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.2.24 release - Fix improper escaping of Libreswan configuration (CVE-2024-9050) - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-81948) - Fix order of parsing port/controller properies in nmcli (RHEL-80273) - Improve interface activation logic (RHEL-80157) - Fix WireGuard IPv6 firewall rules (RHEL-79975) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105) - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105) - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-81948) - Fix order of parsing port/controller properies in nmcli (RHEL-80273) - Improve interface activation logic (RHEL-80157) - Fix WireGuard IPv6 firewall rules (RHEL-79975) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105) - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105) - Update to 1.56.0 - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) - Update to 1.56.0 (rc1) - Support setting protocol version of HSR/PRP (RHEL-100764) - Support interlink for HSR/PRP (RHEL-100768) - Reject connections if the corresponding feature is disabled or removed (RHEL-93829) - Improve logging of networking off (RHEL-103925) - Don't delete unrelated OVS ports (RHEL-120176) - Update to 1.55.4 (dev) - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844) - Fix connection.autoconnect-ports of OVS ports (RHEL-93876) - Global DNS config without domains silently ignored from D-Bus (RHEL-109853) - Add support for a DHCP client-id kernelarg (RHEL-108454) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102318) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102774) - Allow setting IP method to disabled in port connections (RHEL-90756) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125) - Fix a race condition in ovs tun interface (RHEL-17358) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-89914) - Crash on _l3cfg_notify_cb (RHEL-92020) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83058) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-70484) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Correct SPDX expression syntax - operators must be uppercase - Update to 2.0.36 - Bump release for June 2024 mass rebuild - Update to 2.0.34 (rhbz#2105023) - Resolve issues found by rpmdiff - add a patch to fix getaddrinfo detection to avoid using gethostbyname - add explicit Requires: on subpackages to avoid the need to test interoperability between the various combinations of old and new subpackages - Conditional Perl & Python module build, by default disabled - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix C compatibility issues - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Correct SPDX expression syntax - operators must be uppercase - Update to 2.0.36 - Bump release for June 2024 mass rebuild - Update to 2.0.34 (rhbz#2105023) - Resolve issues found by rpmdiff - add a patch to fix getaddrinfo detection to avoid using gethostbyname - add explicit Requires: on subpackages to avoid the need to test interoperability between the various combinations of old and new subpackages - Conditional Perl & Python module build, by default disabled - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix C compatibility issues - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Correct SPDX expression syntax - operators must be uppercase - Update to 2.0.36 - Bump release for June 2024 mass rebuild - Update to 2.0.34 (rhbz#2105023) - Resolve issues found by rpmdiff - add a patch to fix getaddrinfo detection to avoid using gethostbyname - add explicit Requires: on subpackages to avoid the need to test interoperability between the various combinations of old and new subpackages - Conditional Perl & Python module build, by default disabled - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix C compatibility issues - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license format - Fix CVE-2026-41651 - Related: RHEL-39682 (Backport upstream patches to fix recent regressions) - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream metadata) - Fix CVE-2026-41651 - Related: RHEL-39682 (Backport upstream patches to fix recent regressions) - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream metadata) - Fix CVE-2026-41651 - Related: RHEL-39682 (Backport upstream patches to fix recent regressions) - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream metadata) - Fix CVE-2026-41651 - Related: RHEL-39682 (Backport upstream patches to fix recent regressions) - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream metadata) - Fix CVE-2026-41651 - Related: RHEL-39682 (Backport upstream patches to fix recent regressions) - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream metadata) - Update to 3.2.4 - Add fix for building against PipeWire 1.3.x Resolves: RHEL-77078 Initial commit on c10s Resolves: RHEL-77078 - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82243] - Resolves: RHEL-82243 ([Azure][image mode][WALA][RHEL-10] Unable to setup the persistent firewall rules) - wla-Remove-the-10-azure-unmanaged-sriov.rules-to-avoid-c.patch [RHEL-114155] - Resolves: RHEL-114155 ([Azure][WALA][RHEL-10] Remove 10-azure-unmanaged-sriov.rules) - Rebase to 2.14.0.1 [RHEL-116438] - Resolves: RHEL-116438 (Rebase to v2.14.0.1) - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-109465] - wla-docs-add-waagent-manpage-3401.patch [RHEL-96792] - Resolves: RHEL-109465 ([Azure][RHEL-10][WALA][Image mode] Cannot find 'service' command) - Resolves: RHEL-96792 ([Azure][WALA][RHEL-10] Missing man page) - Rebase to 2.13.1.1 [RHEL-86509] - Resolves: RHEL-86509 (Rebase to v2.13.1.1) - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [RHEL-84073] - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-84073] - Resolves: RHEL-84073 ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs [rhel-10]) - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-68796] - Resolves: RHEL-68796 (Please add `mana` to 99-azure-unmanaged-devices.conf of Azure image) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - wla-skip-cgorup-monitor-2939.patch [RHEL-46713] - Resolves: RHEL-46713 ([Azure][RHEL-10][WALA] waagent -collect-logs doesn't work and the log is confusing) - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [RHEL-40966] - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [RHEL-40966] - wla-redhat-Mark-directories-properly-in-the-files-list.patch [RHEL-40966] - wla-redhat-Remove-files-inside-WALA-services-directory.patch [RHEL-40966] - Resolves: RHEL-40966 ([Azure][WALA][RHEL-10] Provisioning failed if no ifcfg-eth0) - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82243] - Resolves: RHEL-82243 ([Azure][image mode][WALA][RHEL-10] Unable to setup the persistent firewall rules) - wla-Remove-the-10-azure-unmanaged-sriov.rules-to-avoid-c.patch [RHEL-114155] - Resolves: RHEL-114155 ([Azure][WALA][RHEL-10] Remove 10-azure-unmanaged-sriov.rules) - Rebase to 2.14.0.1 [RHEL-116438] - Resolves: RHEL-116438 (Rebase to v2.14.0.1) - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-109465] - wla-docs-add-waagent-manpage-3401.patch [RHEL-96792] - Resolves: RHEL-109465 ([Azure][RHEL-10][WALA][Image mode] Cannot find 'service' command) - Resolves: RHEL-96792 ([Azure][WALA][RHEL-10] Missing man page) - Rebase to 2.13.1.1 [RHEL-86509] - Resolves: RHEL-86509 (Rebase to v2.13.1.1) - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [RHEL-84073] - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-84073] - Resolves: RHEL-84073 ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs [rhel-10]) - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-68796] - Resolves: RHEL-68796 (Please add `mana` to 99-azure-unmanaged-devices.conf of Azure image) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - wla-skip-cgorup-monitor-2939.patch [RHEL-46713] - Resolves: RHEL-46713 ([Azure][RHEL-10][WALA] waagent -collect-logs doesn't work and the log is confusing) - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [RHEL-40966] - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [RHEL-40966] - wla-redhat-Mark-directories-properly-in-the-files-list.patch [RHEL-40966] - wla-redhat-Remove-files-inside-WALA-services-directory.patch [RHEL-40966] - Resolves: RHEL-40966 ([Azure][WALA][RHEL-10] Provisioning failed if no ifcfg-eth0) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Gating enablement rebuild (RHEL-52092) - Bump release for June 2024 mass rebuild - SPDX license tags. - 1.6.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Backport upstream patches to fix C type errors - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Port configure script to C99 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0 - Related: RHEL-122178 - install BATS if it's not available - Related: RHEL-80817 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0 - Related: RHEL-80817 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0 - Related: RHEL-80817 - fix dep issues in tests subpackage - Resolves: RHEL-80817 - rebuilt to try TMT tests in osci - Resolves: RHEL-80817 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0 - Related: RHEL-58990 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1 - Related: RHEL-58990 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.0 - Resolves: RHEL-65320 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1 - Resolves: RHEL-170143 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0 - Related: RHEL-122178 - install BATS if it's not available - Related: RHEL-80817 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0 - Related: RHEL-80817 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0 - Related: RHEL-80817 - fix dep issues in tests subpackage - Resolves: RHEL-80817 - rebuilt to try TMT tests in osci - Resolves: RHEL-80817 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0 - Related: RHEL-58990 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1 - Related: RHEL-58990 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.0 - Resolves: RHEL-65320 - Allow "Lastname, Firstname" in /etc/passwd Resolves: RHEL-12265 - Backport changes from Fedora 40 Resolves: RHEL-78526 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Allow "Lastname, Firstname" in /etc/passwd Resolves: RHEL-12265 - Backport changes from Fedora 40 Resolves: RHEL-78526 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add riscv64 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX license fix - Converted license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebase to version 20230622 (#2216272) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebase to version 20230118 (#2162105) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebase to version 20230622 (#2216272) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebase to version 20230118 (#2162105) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 46.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 46.alpha - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.0 - Update to 45.rc - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 45.beta - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 46.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 46.alpha - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.0 - Update to 45.rc - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 45.beta - new version - new version - new version - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - New release - Bump release for June 2024 mass rebuild - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 5.5.1 - Update to 5.5.0 - new version - new version - new version - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - New release - Bump release for June 2024 mass rebuild - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 5.5.1 - Update to 5.5.0 - Adjust default config to avoid false positives in /etc Resolves: RHEL-39970 - /boot/grub2/grubenv is excluded from check due to boot_success implementation - Do not monitor link count in /var/log/journal Resolves: RHEL-39970 - Modernize aide config file Resolves: RHEL-39970 - No path reference ends with '/' Resolves: RHEL-39959 - rebase to 0.19.2 Resolves: RHEL-110572 - exclude directory but include subitems Resolves: RHEL-1382 - prevent aide from exiting if a file is truncated during check Resolves: RHEL-1383 - Switch to libnettle for hashing Resolves: RHEL-59170 RHEL 10.0 ERRATUM Resolves: RHEL-4320 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild REDHAT 10.0 ERRATUM - fix verbose patch - get rid of libgcrypt Resolves: RHEL-36780 - rebase to 0.18.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Re-add syslog_format config option dropped during rebase to 0.19.2 Resolves: RHEL-178845 - Add aide-migrate-config to automate config migration from pre-0.19 syntax - Adjust default config to avoid false positives in /etc Resolves: RHEL-39970 - /boot/grub2/grubenv is excluded from check due to boot_success implementation - Do not monitor link count in /var/log/journal Resolves: RHEL-39970 - Modernize aide config file Resolves: RHEL-39970 - No path reference ends with '/' Resolves: RHEL-39959 - rebase to 0.19.2 Resolves: RHEL-110572 - exclude directory but include subitems Resolves: RHEL-1382 - prevent aide from exiting if a file is truncated during check Resolves: RHEL-1383 - Switch to libnettle for hashing Resolves: RHEL-59170 RHEL 10.0 ERRATUM Resolves: RHEL-4320 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add background symlinks for alternative desktops - Add ipa modern-ui artwork - Add pixmaps/fedora-logo.ico - Package org.fedoraproject.AnacondaInstaller.svg icon - Change AlmaLinux logos size to match upstream - Update wallpapers and Anaconda graphics - Install bootloader logos for m1n1 - Initial release - Update index.html to fix link on the logo. - Updated index.html - Update for AlmaLinux 10 - Revise AlmaLinux description not to hostile towards CentOS - Add background symlinks for alternative desktops - Add ipa modern-ui artwork - Add pixmaps/fedora-logo.ico - Package org.fedoraproject.AnacondaInstaller.svg icon - Change AlmaLinux logos size to match upstream - Update wallpapers and Anaconda graphics - Install bootloader logos for m1n1 - Initial release - Add background symlinks for alternative desktops - Add ipa modern-ui artwork - Add pixmaps/fedora-logo.ico - Package org.fedoraproject.AnacondaInstaller.svg icon - Change AlmaLinux logos size to match upstream - Update wallpapers and Anaconda graphics - Install bootloader logos for m1n1 - Initial release - Add background symlinks for alternative desktops - Add ipa modern-ui artwork - Add pixmaps/fedora-logo.ico - Package org.fedoraproject.AnacondaInstaller.svg icon - Change AlmaLinux logos size to match upstream - Update wallpapers and Anaconda graphics - Install bootloader logos for m1n1 - Initial release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add gating.yaml, fix SPDX license - Add rpminspect.yaml file to skip annobin check - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - update SPDX licenses - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - fix control API remap issue - update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3 - update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14 - update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12 - fix control API remap issue - update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3 - update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14 - update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12 - fix SPDX licenses - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Disable avtp plugin in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - change to SPDX licenses - Rebuild for ffmpeg 6.0 - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org> - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com> - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com> - CI test & RHEL cleanups - fix SPDX licenses - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Disable avtp plugin in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - change to SPDX licenses - Rebuild for ffmpeg 6.0 - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org> - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com> - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com> - CI test & RHEL cleanups - fix SPDX licenses - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Disable avtp plugin in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - change to SPDX licenses - Rebuild for ffmpeg 6.0 - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org> - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com> - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com> - CI test & RHEL cleanups - fix SPDX licenses - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Disable avtp plugin in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - change to SPDX licenses - Rebuild for ffmpeg 6.0 - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org> - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com> - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com> - CI test & RHEL cleanups - fix SPDX licenses - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Disable avtp plugin in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - change to SPDX licenses - Rebuild for ffmpeg 6.0 - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org> - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com> - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com> - CI test & RHEL cleanups - fix SPDX licenses - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Disable avtp plugin in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - change to SPDX licenses - Rebuild for ffmpeg 6.0 - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org> - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com> - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com> - CI test & RHEL cleanups - fix SPDX licenses - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Disable avtp plugin in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - change to SPDX licenses - Rebuild for ffmpeg 6.0 - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org> - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com> - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com> - CI test & RHEL cleanups - fix SPDX licenses - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Disable avtp plugin in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - change to SPDX licenses - Rebuild for ffmpeg 6.0 - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org> - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com> - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com> - CI test & RHEL cleanups - fix SPDX licenses - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Disable avtp plugin in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - change to SPDX licenses - Rebuild for ffmpeg 6.0 - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org> - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com> - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com> - CI test & RHEL cleanups - Update to v2025.12.2 - Update to v2025.05.1 - Update to v2025.05 - fix the pretrans script for symlink swap (sof-ace-tplg <-> sof-ipc4-tplg) - Add sof-ipc4-lib directory - Update to v2024.09.2 - Update to v2024.09.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to v2024.09 - Remove AVS topology files (moved to linux-firmware) - Move remaining files to /usr tree - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Updated to 1.2.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix C type errors using G_CALLBACK - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - fix control API remap issue - update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3 - update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14 - update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12 * Updated to 1.2.15.2 * Updated to 1.2.14 * Updated to 1.2.13 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 * Updated to 1.2.12 - Bump release for June 2024 mass rebuild * Updated to 1.2.11 * Updated to 1.2.15.2 * Updated to 1.2.14 * Updated to 1.2.13 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 * Updated to 1.2.12 - Bump release for June 2024 mass rebuild * Updated to 1.2.11 - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops Resolves: RHEL-92555 - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120) - Add amdnpu linux firmware folder (RHEL-77950) - Introduce new PMF TA (RHEL-86837) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-85120, RHEL-77950, RHEL-86837 - accel: ivpu: Update firmware for NPU (RHEL-38586) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-38586 - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops Resolves: RHEL-92555 - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120) - Add amdnpu linux firmware folder (RHEL-77950) - Introduce new PMF TA (RHEL-86837) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-85120, RHEL-77950, RHEL-86837 - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops Resolves: RHEL-92555 - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - Enable Btrfs support for AlmaLinux - Apply AlmaLinux patches - Enable live subpackage by default on AlmaLinux - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal) Resolves: RHEL-151547 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-58828 - flatpak: tests: fix unreachable code (fsouza.bruno) Related: RHEL-143566 - flatpak: Only override remote URLs when subscription module is available (bciconel) Related: RHEL-143566 - flatpak: Make installation failures non-blocking (bciconel) Resolves: RHEL-143566 - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou) Resolves: RHEL-144456 - storage: stop creating /etc/mtab symlink during installation (k.koukiou) Related: RHEL-135116 - rescue: Add warning for immutable systems (k.koukiou) Related: RHEL-135116 - rescue: detect OSTree deployments in rescue mode and show deployment path (k.koukiou) Resolves: RHEL-135116 - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes (k.koukiou) Related: RHEL-135116 - network: List all network interfaces IP for RDP session (ppolawsk) Resolves: RHEL-74268 - installation: run subscription tasks after network configuration (bciconel) Resolves: RHEL-135111 - subscription: ensure /var/lib/insights exists before running insights-client (bciconel) Resolves: RHEL-135111 - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou) Resolves: RHEL-117685 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-16168 - payloads: flatpak: fix SSL error detection on older Python versions (bciconel) Related: RHEL-141069 Resolves: RHEL-142694 - ostree needs to have /boot be bindmounted into sysroot (k.koukiou) Resolves: RHEL-66155 - modules: rpm_ostree: allow /boot/efi mount point in bootc installation (k.koukiou) Resolves: RHEL-141155 - rhsm: add --flatpak-registry-url support (bciconel) Resolves: RHEL-132652 - flatpak: handle self-signed certificate errors in registry sources (bciconel) Resolves: RHEL-132652 - flatpak: add utility to check for self-signed certificate errors (bciconel) Resolves: RHEL-132652 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-99673 - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman) Resolves: RHEL-112702 Related: RHEL-132666 - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection (k.koukiou) Related: RHEL-58215 - bootc: Collect kernel arguments before installation to pass to bootc (k.koukiou) Related: RHEL-58215 - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou) Related: RHEL-58215 - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou) Related: RHEL-58215 - Add bootc installation method (ppolawsk) Resolves: RHEL-58215 - Include bootc command in expected pykickstart commands (ppolawsk) Related: RHEL-58215 - Enable Btrfs support for AlmaLinux - Apply AlmaLinux patches - Enable live subpackage by default on AlmaLinux - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal) Resolves: RHEL-151547 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-58828 - flatpak: tests: fix unreachable code (fsouza.bruno) Related: RHEL-143566 - flatpak: Only override remote URLs when subscription module is available (bciconel) Related: RHEL-143566 - flatpak: Make installation failures non-blocking (bciconel) Resolves: RHEL-143566 - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou) Resolves: RHEL-144456 - storage: stop creating /etc/mtab symlink during installation (k.koukiou) Related: RHEL-135116 - rescue: Add warning for immutable systems (k.koukiou) Related: RHEL-135116 - rescue: detect OSTree deployments in rescue mode and show deployment path (k.koukiou) Resolves: RHEL-135116 - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes (k.koukiou) Related: RHEL-135116 - network: List all network interfaces IP for RDP session (ppolawsk) Resolves: RHEL-74268 - installation: run subscription tasks after network configuration (bciconel) Resolves: RHEL-135111 - subscription: ensure /var/lib/insights exists before running insights-client (bciconel) Resolves: RHEL-135111 - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou) Resolves: RHEL-117685 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-16168 - payloads: flatpak: fix SSL error detection on older Python versions (bciconel) Related: RHEL-141069 Resolves: RHEL-142694 - ostree needs to have /boot be bindmounted into sysroot (k.koukiou) Resolves: RHEL-66155 - modules: rpm_ostree: allow /boot/efi mount point in bootc installation (k.koukiou) Resolves: RHEL-141155 - rhsm: add --flatpak-registry-url support (bciconel) Resolves: RHEL-132652 - flatpak: handle self-signed certificate errors in registry sources (bciconel) Resolves: RHEL-132652 - flatpak: add utility to check for self-signed certificate errors (bciconel) Resolves: RHEL-132652 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-99673 - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman) Resolves: RHEL-112702 Related: RHEL-132666 - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection (k.koukiou) Related: RHEL-58215 - bootc: Collect kernel arguments before installation to pass to bootc (k.koukiou) Related: RHEL-58215 - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou) Related: RHEL-58215 - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou) Related: RHEL-58215 - Add bootc installation method (ppolawsk) Resolves: RHEL-58215 - Include bootc command in expected pykickstart commands (ppolawsk) Related: RHEL-58215 - Enable Btrfs support for AlmaLinux - Apply AlmaLinux patches - Enable live subpackage by default on AlmaLinux - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal) Resolves: RHEL-151547 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-58828 - flatpak: tests: fix unreachable code (fsouza.bruno) Related: RHEL-143566 - flatpak: Only override remote URLs when subscription module is available (bciconel) Related: RHEL-143566 - flatpak: Make installation failures non-blocking (bciconel) Resolves: RHEL-143566 - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou) Resolves: RHEL-144456 - storage: stop creating /etc/mtab symlink during installation (k.koukiou) Related: RHEL-135116 - rescue: Add warning for immutable systems (k.koukiou) Related: RHEL-135116 - rescue: detect OSTree deployments in rescue mode and show deployment path (k.koukiou) Resolves: RHEL-135116 - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes (k.koukiou) Related: RHEL-135116 - network: List all network interfaces IP for RDP session (ppolawsk) Resolves: RHEL-74268 - installation: run subscription tasks after network configuration (bciconel) Resolves: RHEL-135111 - subscription: ensure /var/lib/insights exists before running insights-client (bciconel) Resolves: RHEL-135111 - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou) Resolves: RHEL-117685 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-16168 - payloads: flatpak: fix SSL error detection on older Python versions (bciconel) Related: RHEL-141069 Resolves: RHEL-142694 - ostree needs to have /boot be bindmounted into sysroot (k.koukiou) Resolves: RHEL-66155 - modules: rpm_ostree: allow /boot/efi mount point in bootc installation (k.koukiou) Resolves: RHEL-141155 - rhsm: add --flatpak-registry-url support (bciconel) Resolves: RHEL-132652 - flatpak: handle self-signed certificate errors in registry sources (bciconel) Resolves: RHEL-132652 - flatpak: add utility to check for self-signed certificate errors (bciconel) Resolves: RHEL-132652 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-99673 - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman) Resolves: RHEL-112702 Related: RHEL-132666 - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection (k.koukiou) Related: RHEL-58215 - bootc: Collect kernel arguments before installation to pass to bootc (k.koukiou) Related: RHEL-58215 - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou) Related: RHEL-58215 - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou) Related: RHEL-58215 - Add bootc installation method (ppolawsk) Resolves: RHEL-58215 - Include bootc command in expected pykickstart commands (ppolawsk) Related: RHEL-58215 - Enable Btrfs support for AlmaLinux - Apply AlmaLinux patches - Enable live subpackage by default on AlmaLinux - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal) Resolves: RHEL-151547 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-58828 - flatpak: tests: fix unreachable code (fsouza.bruno) Related: RHEL-143566 - flatpak: Only override remote URLs when subscription module is available (bciconel) Related: RHEL-143566 - flatpak: Make installation failures non-blocking (bciconel) Resolves: RHEL-143566 - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou) Resolves: RHEL-144456 - storage: stop creating /etc/mtab symlink during installation (k.koukiou) Related: RHEL-135116 - rescue: Add warning for immutable systems (k.koukiou) Related: RHEL-135116 - rescue: detect OSTree deployments in rescue mode and show deployment path (k.koukiou) Resolves: RHEL-135116 - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes (k.koukiou) Related: RHEL-135116 - network: List all network interfaces IP for RDP session (ppolawsk) Resolves: RHEL-74268 - installation: run subscription tasks after network configuration (bciconel) Resolves: RHEL-135111 - subscription: ensure /var/lib/insights exists before running insights-client (bciconel) Resolves: RHEL-135111 - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou) Resolves: RHEL-117685 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-16168 - payloads: flatpak: fix SSL error detection on older Python versions (bciconel) Related: RHEL-141069 Resolves: RHEL-142694 - ostree needs to have /boot be bindmounted into sysroot (k.koukiou) Resolves: RHEL-66155 - modules: rpm_ostree: allow /boot/efi mount point in bootc installation (k.koukiou) Resolves: RHEL-141155 - rhsm: add --flatpak-registry-url support (bciconel) Resolves: RHEL-132652 - flatpak: handle self-signed certificate errors in registry sources (bciconel) Resolves: RHEL-132652 - flatpak: add utility to check for self-signed certificate errors (bciconel) Resolves: RHEL-132652 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-99673 - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman) Resolves: RHEL-112702 Related: RHEL-132666 - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection (k.koukiou) Related: RHEL-58215 - bootc: Collect kernel arguments before installation to pass to bootc (k.koukiou) Related: RHEL-58215 - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou) Related: RHEL-58215 - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou) Related: RHEL-58215 - Add bootc installation method (ppolawsk) Resolves: RHEL-58215 - Include bootc command in expected pykickstart commands (ppolawsk) Related: RHEL-58215 - Enable Btrfs support for AlmaLinux - Apply AlmaLinux patches - Enable live subpackage by default on AlmaLinux - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal) Resolves: RHEL-151547 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-58828 - flatpak: tests: fix unreachable code (fsouza.bruno) Related: RHEL-143566 - flatpak: Only override remote URLs when subscription module is available (bciconel) Related: RHEL-143566 - flatpak: Make installation failures non-blocking (bciconel) Resolves: RHEL-143566 - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou) Resolves: RHEL-144456 - storage: stop creating /etc/mtab symlink during installation (k.koukiou) Related: RHEL-135116 - rescue: Add warning for immutable systems (k.koukiou) Related: RHEL-135116 - rescue: detect OSTree deployments in rescue mode and show deployment path (k.koukiou) Resolves: RHEL-135116 - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes (k.koukiou) Related: RHEL-135116 - network: List all network interfaces IP for RDP session (ppolawsk) Resolves: RHEL-74268 - installation: run subscription tasks after network configuration (bciconel) Resolves: RHEL-135111 - subscription: ensure /var/lib/insights exists before running insights-client (bciconel) Resolves: RHEL-135111 - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou) Resolves: RHEL-117685 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-16168 - payloads: flatpak: fix SSL error detection on older Python versions (bciconel) Related: RHEL-141069 Resolves: RHEL-142694 - ostree needs to have /boot be bindmounted into sysroot (k.koukiou) Resolves: RHEL-66155 - modules: rpm_ostree: allow /boot/efi mount point in bootc installation (k.koukiou) Resolves: RHEL-141155 - rhsm: add --flatpak-registry-url support (bciconel) Resolves: RHEL-132652 - flatpak: handle self-signed certificate errors in registry sources (bciconel) Resolves: RHEL-132652 - flatpak: add utility to check for self-signed certificate errors (bciconel) Resolves: RHEL-132652 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-99673 - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman) Resolves: RHEL-112702 Related: RHEL-132666 - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection (k.koukiou) Related: RHEL-58215 - bootc: Collect kernel arguments before installation to pass to bootc (k.koukiou) Related: RHEL-58215 - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou) Related: RHEL-58215 - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou) Related: RHEL-58215 - Add bootc installation method (ppolawsk) Resolves: RHEL-58215 - Include bootc command in expected pykickstart commands (ppolawsk) Related: RHEL-58215 - Enable Btrfs support for AlmaLinux - Apply AlmaLinux patches - Enable live subpackage by default on AlmaLinux - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal) Resolves: RHEL-151547 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-58828 - flatpak: tests: fix unreachable code (fsouza.bruno) Related: RHEL-143566 - flatpak: Only override remote URLs when subscription module is available (bciconel) Related: RHEL-143566 - flatpak: Make installation failures non-blocking (bciconel) Resolves: RHEL-143566 - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou) Resolves: RHEL-144456 - storage: stop creating /etc/mtab symlink during installation (k.koukiou) Related: RHEL-135116 - rescue: Add warning for immutable systems (k.koukiou) Related: RHEL-135116 - rescue: detect OSTree deployments in rescue mode and show deployment path (k.koukiou) Resolves: RHEL-135116 - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes (k.koukiou) Related: RHEL-135116 - network: List all network interfaces IP for RDP session (ppolawsk) Resolves: RHEL-74268 - installation: run subscription tasks after network configuration (bciconel) Resolves: RHEL-135111 - subscription: ensure /var/lib/insights exists before running insights-client (bciconel) Resolves: RHEL-135111 - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou) Resolves: RHEL-117685 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-16168 - payloads: flatpak: fix SSL error detection on older Python versions (bciconel) Related: RHEL-141069 Resolves: RHEL-142694 - ostree needs to have /boot be bindmounted into sysroot (k.koukiou) Resolves: RHEL-66155 - modules: rpm_ostree: allow /boot/efi mount point in bootc installation (k.koukiou) Resolves: RHEL-141155 - rhsm: add --flatpak-registry-url support (bciconel) Resolves: RHEL-132652 - flatpak: handle self-signed certificate errors in registry sources (bciconel) Resolves: RHEL-132652 - flatpak: add utility to check for self-signed certificate errors (bciconel) Resolves: RHEL-132652 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-99673 - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman) Resolves: RHEL-112702 Related: RHEL-132666 - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection (k.koukiou) Related: RHEL-58215 - bootc: Collect kernel arguments before installation to pass to bootc (k.koukiou) Related: RHEL-58215 - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou) Related: RHEL-58215 - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou) Related: RHEL-58215 - Add bootc installation method (ppolawsk) Resolves: RHEL-58215 - Include bootc command in expected pykickstart commands (ppolawsk) Related: RHEL-58215 - Enable Btrfs support for AlmaLinux - Apply AlmaLinux patches - Enable live subpackage by default on AlmaLinux - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal) Resolves: RHEL-151547 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-58828 - flatpak: tests: fix unreachable code (fsouza.bruno) Related: RHEL-143566 - flatpak: Only override remote URLs when subscription module is available (bciconel) Related: RHEL-143566 - flatpak: Make installation failures non-blocking (bciconel) Resolves: RHEL-143566 - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou) Resolves: RHEL-144456 - storage: stop creating /etc/mtab symlink during installation (k.koukiou) Related: RHEL-135116 - rescue: Add warning for immutable systems (k.koukiou) Related: RHEL-135116 - rescue: detect OSTree deployments in rescue mode and show deployment path (k.koukiou) Resolves: RHEL-135116 - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes (k.koukiou) Related: RHEL-135116 - network: List all network interfaces IP for RDP session (ppolawsk) Resolves: RHEL-74268 - installation: run subscription tasks after network configuration (bciconel) Resolves: RHEL-135111 - subscription: ensure /var/lib/insights exists before running insights-client (bciconel) Resolves: RHEL-135111 - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou) Resolves: RHEL-117685 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-16168 - payloads: flatpak: fix SSL error detection on older Python versions (bciconel) Related: RHEL-141069 Resolves: RHEL-142694 - ostree needs to have /boot be bindmounted into sysroot (k.koukiou) Resolves: RHEL-66155 - modules: rpm_ostree: allow /boot/efi mount point in bootc installation (k.koukiou) Resolves: RHEL-141155 - rhsm: add --flatpak-registry-url support (bciconel) Resolves: RHEL-132652 - flatpak: handle self-signed certificate errors in registry sources (bciconel) Resolves: RHEL-132652 - flatpak: add utility to check for self-signed certificate errors (bciconel) Resolves: RHEL-132652 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-99673 - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman) Resolves: RHEL-112702 Related: RHEL-132666 - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection (k.koukiou) Related: RHEL-58215 - bootc: Collect kernel arguments before installation to pass to bootc (k.koukiou) Related: RHEL-58215 - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou) Related: RHEL-58215 - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou) Related: RHEL-58215 - Add bootc installation method (ppolawsk) Resolves: RHEL-58215 - Include bootc command in expected pykickstart commands (ppolawsk) Related: RHEL-58215 - Enable Btrfs support for AlmaLinux - Apply AlmaLinux patches - Enable live subpackage by default on AlmaLinux - pyanaconda: storage: platform: Raise /boot to 2 GiB (neal) Resolves: RHEL-151547 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-58828 - flatpak: tests: fix unreachable code (fsouza.bruno) Related: RHEL-143566 - flatpak: Only override remote URLs when subscription module is available (bciconel) Related: RHEL-143566 - flatpak: Make installation failures non-blocking (bciconel) Resolves: RHEL-143566 - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou) Resolves: RHEL-144456 - storage: stop creating /etc/mtab symlink during installation (k.koukiou) Related: RHEL-135116 - rescue: Add warning for immutable systems (k.koukiou) Related: RHEL-135116 - rescue: detect OSTree deployments in rescue mode and show deployment path (k.koukiou) Resolves: RHEL-135116 - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes (k.koukiou) Related: RHEL-135116 - network: List all network interfaces IP for RDP session (ppolawsk) Resolves: RHEL-74268 - installation: run subscription tasks after network configuration (bciconel) Resolves: RHEL-135111 - subscription: ensure /var/lib/insights exists before running insights-client (bciconel) Resolves: RHEL-135111 - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou) Resolves: RHEL-117685 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-16168 - payloads: flatpak: fix SSL error detection on older Python versions (bciconel) Related: RHEL-141069 Resolves: RHEL-142694 - ostree needs to have /boot be bindmounted into sysroot (k.koukiou) Resolves: RHEL-66155 - modules: rpm_ostree: allow /boot/efi mount point in bootc installation (k.koukiou) Resolves: RHEL-141155 - rhsm: add --flatpak-registry-url support (bciconel) Resolves: RHEL-132652 - flatpak: handle self-signed certificate errors in registry sources (bciconel) Resolves: RHEL-132652 - flatpak: add utility to check for self-signed certificate errors (bciconel) Resolves: RHEL-132652 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-99673 - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman) Resolves: RHEL-112702 Related: RHEL-132666 - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection (k.koukiou) Related: RHEL-58215 - bootc: Collect kernel arguments before installation to pass to bootc (k.koukiou) Related: RHEL-58215 - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou) Related: RHEL-58215 - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou) Related: RHEL-58215 - Add bootc installation method (ppolawsk) Resolves: RHEL-58215 - Include bootc command in expected pykickstart commands (ppolawsk) Related: RHEL-58215 - Rebuild against LLVM 21. (RHEL-108331) - Annocheck: Update heuristic to detect gcc libraries. (RHEL-124816) - Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE. (RHEL-123671) - Annocheck: Improve detection of glibc static maths libraries. (RHEL-107470) - Rebase to 12.98. (RHEL-105572) - Improve configure and meson files for consistent builds. - Annocheck: Delete the temporary debug info directory after the tests have finished. - Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216) - Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180) - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824) - Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213) - NVR bump in order to rebuild with LLVM 20. (RHEL-82000) - Annocheck: Fix test for GO revision. (RHEL-56031) - Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79473) - Rebuild against LLVM 21. (RHEL-108331) - Annocheck: Update heuristic to detect gcc libraries. (RHEL-124816) - Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE. (RHEL-123671) - Annocheck: Improve detection of glibc static maths libraries. (RHEL-107470) - Rebase to 12.98. (RHEL-105572) - Improve configure and meson files for consistent builds. - Annocheck: Delete the temporary debug info directory after the tests have finished. - Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216) - Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180) - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824) - Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213) - NVR bump in order to rebuild with LLVM 20. (RHEL-82000) - Annocheck: Fix test for GO revision. (RHEL-56031) - Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79473) - Rebuild against LLVM 21. (RHEL-108331) - Annocheck: Update heuristic to detect gcc libraries. (RHEL-124816) - Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE. (RHEL-123671) - Annocheck: Improve detection of glibc static maths libraries. (RHEL-107470) - Rebase to 12.98. (RHEL-105572) - Improve configure and meson files for consistent builds. - Annocheck: Delete the temporary debug info directory after the tests have finished. - Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216) - Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180) - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824) - Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213) - NVR bump in order to rebuild with LLVM 20. (RHEL-82000) - Annocheck: Fix test for GO revision. (RHEL-56031) - Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79473) - Rebuild against LLVM 21. (RHEL-108331) - Annocheck: Update heuristic to detect gcc libraries. (RHEL-124816) - Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE. (RHEL-123671) - Annocheck: Improve detection of glibc static maths libraries. (RHEL-107470) - Rebase to 12.98. (RHEL-105572) - Improve configure and meson files for consistent builds. - Annocheck: Delete the temporary debug info directory after the tests have finished. - Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216) - Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180) - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824) - Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213) - NVR bump in order to rebuild with LLVM 20. (RHEL-82000) - Annocheck: Fix test for GO revision. (RHEL-56031) - Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79473) - Rebuild against LLVM 21. (RHEL-108331) - Annocheck: Update heuristic to detect gcc libraries. (RHEL-124816) - Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE. (RHEL-123671) - Annocheck: Improve detection of glibc static maths libraries. (RHEL-107470) - Rebase to 12.98. (RHEL-105572) - Improve configure and meson files for consistent builds. - Annocheck: Delete the temporary debug info directory after the tests have finished. - Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216) - Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180) - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824) - Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213) - NVR bump in order to rebuild with LLVM 20. (RHEL-82000) - Annocheck: Fix test for GO revision. (RHEL-56031) - Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79473) - Rebuild against LLVM 21. (RHEL-108331) - Annocheck: Update heuristic to detect gcc libraries. (RHEL-124816) - Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE. (RHEL-123671) - Annocheck: Improve detection of glibc static maths libraries. (RHEL-107470) - Rebase to 12.98. (RHEL-105572) - Improve configure and meson files for consistent builds. - Annocheck: Delete the temporary debug info directory after the tests have finished. - Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216) - Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180) - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824) - Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213) - NVR bump in order to rebuild with LLVM 20. (RHEL-82000) - Annocheck: Fix test for GO revision. (RHEL-56031) - Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79473) - provide ad_integration_sssd_settings to set proper krb5_canonicalize Resolves: RHEL-147423 - test: use post quantum crypto for certs where available (#368) - fix: Fix templates/configure_ag.j2 for Ansible 2.19 Resolves: RHEL-106152 - refactor: support ansible 2.19 Resolves: RHEL-106152 - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database Resolves: RHEL-101355 - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database Resolves: RHEL-101355 - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list Resolves: RHEL-101356 - Use new adutil functionality to enable AES encryption Resolves: RHEL-68490 - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools Resolves: RHEL-68468 - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula Resolves: RHEL-69315 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add new version to RHEL 10 Resolves: RHEL-34575 - Bump release for June 2024 mass rebuild - Revert ExcludeArch: i686 due to TFT-2460 Resolves: RHEL-16342 - Update to latest upstream version 1.7.4 - Resolves: RHEL-153382 : Fix the role failing on steps that copy logs to the controller EL10 - Fix spec file to require rhel-system-roles package - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10 - Update to latest upstream version via commit hash - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10 - Replace upstream value of leapp_system_roles_collection with downstream redhat.rhel_system_roles. - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10 - Bump version to get automation to do builds and create an erratum - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10 - Initialize the package - Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10 - Fix selinux AVC denial when telemetry is enabled (RHEL-148292) - ansible-core 2.16.16 release (RHEL-145990) - ansible-core 2.16.15 release (RHEL-136245) - Add telemetry for RHEL (RHEL-123004) - ansible-core 2.16.14 release (RHEL-69763) - Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in Ansible-Core) (RHEL-66996) - ansible-core 2.16.13 release (RHEL-69036) - Add back ansible-test subpackage and drop doc subpackage - Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging) (RHEL-59076) - Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized content) (RHEL-69034) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump the Epoch to preserve upgrade path with previous versions of RHEL - Bump release for June 2024 mass rebuild - Fix CVE-2026-11332 (ansible-galaxy role installs could allow arbitrary git configuration injection via malformed role requirements) (RHEL-194128) - Fix selinux AVC denial when telemetry is enabled (RHEL-148292) - ansible-core 2.16.16 release (RHEL-145990) - ansible-core 2.16.15 release (RHEL-136245) - Add telemetry for RHEL (RHEL-123004) - ansible-core 2.16.14 release (RHEL-69763) - Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in Ansible-Core) (RHEL-66996) - ansible-core 2.16.13 release (RHEL-69036) - Add back ansible-test subpackage and drop doc subpackage - Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging) (RHEL-59076) - Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized content) (RHEL-69034) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump the Epoch to preserve upgrade path with previous versions of RHEL - Update to version 1.16.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0 Resolves: RHEL-139147 - Add suppport for passkey management Resolves: RHEL-139258 - Add suppport for sysaccount management Resolves: RHEL-140600 - ipadnsrecord: Allow to set any IP address if create_reverse is false Resolves: RHEL-140606 - Update to version 1.15.1 Resolves: RHEL-104653 - ipaclient: client_dns has new statestore arg with IPA change e6445b8 Resolves: RHEL-106560 - Update to version 1.15.0 Resolves: RHEL-104653 - ipaclient: Fix AttributeError by defaulting dns_over_tls to False Resolves: RHEL-92890 - Provide compatibility for AAH naming Resolves: RHEL-89438 - Ensure ipaidrange required parameters are correct on recent versions of IPA Resolves: RHEL-95104 - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles Resolves: RHEL-78635 - Update to version 1.14.6 - Fix CA certificates iteration in ipaclient role Resolves: RHEL-88212 - Update to version 1.14.5 Resolves: RHEL-67567 - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343) Resolves: RHEL-78229 - Update to version 1.14.4 Resolves: RHEL-67567 - Fix management of AD objects for ipagroup Resolves: RHEL-70023 - Update to version 1.14.3 Resolves: RHEL-67567 - Fix management of AD objects for ipagroup Resolves: RHEL-70023 - Fix version of obsoletes for collection and tests sub package Resolves: RHEL-67567 - Update to version 1.14.2 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2 Resolves: RHEL-67567 - ipareplica: Pass ipareplica_ip_addresses to ipaclient Resolves: RHEL-40228 - ipagroup: Correctly handle externalmember in member actions Resolves: RHEL-70023 - ipasudorule: Evaluate all members related to hosts and users Resolves: RHEL-68441 - ipacert: Correctly handle removFromCRL revocation Resolves: RHEL-70021 - Collection: No more role module duplication Resolves: RHEL-71124 - Update to version 1.14.1 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1 Resolves: RHEL-67567 - Fix requirements for ansible-core Resolves: RHEL-68648 - Latest upstream release - Latest upstream release to resolve build issues - Latest upstream release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for c10s. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Latest upstream release - Fix selinux AVC denial when telemetry is enabled (RHEL-148292) - ansible-core 2.16.16 release (RHEL-145990) - ansible-core 2.16.15 release (RHEL-136245) - Add telemetry for RHEL (RHEL-123004) - ansible-core 2.16.14 release (RHEL-69763) - Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in Ansible-Core) (RHEL-66996) - ansible-core 2.16.13 release (RHEL-69036) - Add back ansible-test subpackage and drop doc subpackage - Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging) (RHEL-59076) - Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized content) (RHEL-69034) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump the Epoch to preserve upgrade path with previous versions of RHEL - Bump release for June 2024 mass rebuild - Fix CVE-2026-11332 (ansible-galaxy role installs could allow arbitrary git configuration injection via malformed role requirements) (RHEL-194128) - Fix selinux AVC denial when telemetry is enabled (RHEL-148292) - ansible-core 2.16.16 release (RHEL-145990) - ansible-core 2.16.15 release (RHEL-136245) - Add telemetry for RHEL (RHEL-123004) - ansible-core 2.16.14 release (RHEL-69763) - Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in Ansible-Core) (RHEL-66996) - ansible-core 2.16.13 release (RHEL-69036) - Add back ansible-test subpackage and drop doc subpackage - Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging) (RHEL-59076) - Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized content) (RHEL-69034) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump the Epoch to preserve upgrade path with previous versions of RHEL - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.10.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Adjust bootstrap build for javapackages-bootstrap update - Resolves: RHEL-52715 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Drop patch removing tools.jar from test classpath - Fix source tarball URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: - RPMAUTOSPEC: unresolvable merge - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Port configure script to C99. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to upstream version 1.9.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.6.0 - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 1.17.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild - Update to upstream version 1.16.0 - Use implicit maven toolchains - Update to upstream version 1.27.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.25.0 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to upstream version 2.16.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild - Build with Jurand instead of deprecated javapackages-extra - Update to upstream version 2.13.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 3.14.0 - Rebuild to regenerate auto-Requires on java - Rebuild - Update to upstream version 3.13.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 1.3.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.3.0 - Rebuild - Build with log4j support in non-bootstrap mode - Convert the License tag to SPDX - Update the project URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 3.10.0 - Rebuild - Update to upstream version 3.9.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 5.1.23 - rebuild for https://fedoraproject.org/wiki/Changes/php83 - build out of sources tree - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - use SPDX license ID - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Resolves: RHEL-43437 Disable stemming support and remove build requirement "libstemmer-devel" - Backport patch to fix installing swcatalog - Resolves: RHEL-31497 (Backport latest build from Fedora 40) - Update to 1.0.2 - Clean up some pre-1.0 scriptlet cruft - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.0.1 - Update to 1.0.0 final - Rebase to 1.0.0 git snapshot - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Resolves: RHEL-43437 Disable stemming support and remove build requirement "libstemmer-devel" - Backport patch to fix installing swcatalog - Resolves: RHEL-31497 (Backport latest build from Fedora 40) - Update to 1.0.2 - Clean up some pre-1.0 scriptlet cruft - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.0.1 - Update to 1.0.0 final - Rebase to 1.0.0 git snapshot - New metadata version - Bump release for October 2024 mass rebuild: - New metadata version - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Fix SPDX license tags and use the new appstream file paths - New metadata version - Switch from the Fedora 40 to the RHEL 9 metadata template - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - resolves: RHEL-107890 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - new version 1.7.5 - Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared memory (CVE-2023-49582) - Bump release for June 2024 mass rebuild - use autosetup - always disable SCTP support at build time - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebuilt - SPDX migration - resolves: RHEL-107890 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - new version 1.7.5 - Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared memory (CVE-2023-49582) - Bump release for June 2024 mass rebuild - use autosetup - always disable SCTP support at build time - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebuilt - SPDX migration - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - restore -devel dep on openldap-devel to fix mod_perl FTBFS Related: RHEL-50386 - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies - Related: RHEL-33728 - drop ENGINE support from apr_crypto - drop ENGINE support from apr_crypto (RHEL-33728) - fix (harmless) gcc snprintf warning in testbuckets.c - Bump release for June 2024 mass rebuild - fix ODBC type mismatch (r1908586) - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - re-enable LMDB by default again for Fedora >= 40 (#1779267) - Resolves: RHEL-236629 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236264 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236469 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235667 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - restore -devel dep on openldap-devel to fix mod_perl FTBFS Related: RHEL-50386 - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies - Related: RHEL-33728 - drop ENGINE support from apr_crypto - drop ENGINE support from apr_crypto (RHEL-33728) - fix (harmless) gcc snprintf warning in testbuckets.c - Bump release for June 2024 mass rebuild - fix ODBC type mismatch (r1908586) - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - re-enable LMDB by default again for Fedora >= 40 (#1779267) - Resolves: RHEL-236629 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236264 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236469 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235667 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - restore -devel dep on openldap-devel to fix mod_perl FTBFS Related: RHEL-50386 - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies - Related: RHEL-33728 - drop ENGINE support from apr_crypto - drop ENGINE support from apr_crypto (RHEL-33728) - fix (harmless) gcc snprintf warning in testbuckets.c - Bump release for June 2024 mass rebuild - fix ODBC type mismatch (r1908586) - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - re-enable LMDB by default again for Fedora >= 40 (#1779267) - Resolves: RHEL-236629 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236264 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236469 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235667 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - restore -devel dep on openldap-devel to fix mod_perl FTBFS Related: RHEL-50386 - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies - Related: RHEL-33728 - drop ENGINE support from apr_crypto - drop ENGINE support from apr_crypto (RHEL-33728) - fix (harmless) gcc snprintf warning in testbuckets.c - Bump release for June 2024 mass rebuild - fix ODBC type mismatch (r1908586) - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - re-enable LMDB by default again for Fedora >= 40 (#1779267) - Resolves: RHEL-236629 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236264 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236469 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235667 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - restore -devel dep on openldap-devel to fix mod_perl FTBFS Related: RHEL-50386 - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies - Related: RHEL-33728 - drop ENGINE support from apr_crypto - drop ENGINE support from apr_crypto (RHEL-33728) - fix (harmless) gcc snprintf warning in testbuckets.c - Bump release for June 2024 mass rebuild - fix ODBC type mismatch (r1908586) - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - re-enable LMDB by default again for Fedora >= 40 (#1779267) - Resolves: RHEL-236629 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236264 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236469 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235667 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - restore -devel dep on openldap-devel to fix mod_perl FTBFS Related: RHEL-50386 - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies - Related: RHEL-33728 - drop ENGINE support from apr_crypto - drop ENGINE support from apr_crypto (RHEL-33728) - fix (harmless) gcc snprintf warning in testbuckets.c - Bump release for June 2024 mass rebuild - fix ODBC type mismatch (r1908586) - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - re-enable LMDB by default again for Fedora >= 40 (#1779267) - Resolves: RHEL-236629 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236264 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236469 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235667 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - restore -devel dep on openldap-devel to fix mod_perl FTBFS Related: RHEL-50386 - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies - Related: RHEL-33728 - drop ENGINE support from apr_crypto - drop ENGINE support from apr_crypto (RHEL-33728) - fix (harmless) gcc snprintf warning in testbuckets.c - Bump release for June 2024 mass rebuild - fix ODBC type mismatch (r1908586) - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - re-enable LMDB by default again for Fedora >= 40 (#1779267) - Resolves: RHEL-236629 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236264 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236469 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235667 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - restore -devel dep on openldap-devel to fix mod_perl FTBFS Related: RHEL-50386 - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies - Related: RHEL-33728 - drop ENGINE support from apr_crypto - drop ENGINE support from apr_crypto (RHEL-33728) - fix (harmless) gcc snprintf warning in testbuckets.c - Bump release for June 2024 mass rebuild - fix ODBC type mismatch (r1908586) - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - re-enable LMDB by default again for Fedora >= 40 (#1779267) - Resolves: RHEL-236629 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236264 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236469 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235667 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - restore -devel dep on openldap-devel to fix mod_perl FTBFS Related: RHEL-50386 - Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies - Related: RHEL-33728 - drop ENGINE support from apr_crypto - drop ENGINE support from apr_crypto (RHEL-33728) - fix (harmless) gcc snprintf warning in testbuckets.c - Bump release for June 2024 mass rebuild - fix ODBC type mismatch (r1908586) - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - re-enable LMDB by default again for Fedora >= 40 (#1779267) - Resolves: RHEL-236629 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236264 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236469 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235667 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fix SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - fix invalid escape sequence (#2220936) - Rebuilt for Python 3.12 - Fix build with pip 23.1.2+ - Fixes: rhbz#2209018 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Remove dependency on junit5-bom - Update to upstream version 3.24.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix CVE-2026-24400: add XXE protection to XmlStringPrettyFormatter - Resolves: RHEL-183469 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support Resolves: 83403 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 2.52.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.51.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.50.1 - Update to 2.50.0 - Update to 2.49.91 - Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support Resolves: 83403 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 2.52.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.51.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.50.1 - Update to 2.50.0 - Update to 2.49.91 - Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support Resolves: 83403 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 2.52.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.51.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.50.1 - Update to 2.50.0 - Update to 2.49.91 - Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support Resolves: 83403 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 2.52.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.51.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.50.1 - Update to 2.50.0 - Update to 2.49.91 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support Resolves: 83403 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 2.52.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.51.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.50.1 - Update to 2.50.0 - Update to 2.49.91 - Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support Resolves: 83403 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 2.52.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.51.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.50.1 - Update to 2.50.0 - Update to 2.49.91 - Fix POSTIN scriplet to not fail during upgrade Resolves: RHEL-128464 - ausearch-checkpoint race condition fix Resolves: RHEL-86896 - Adjust dependency between audit and audit-rules Resolves: RHEL-77141 - Add auditd.cron (5) man page for time-based log rotation description Resolves: RHEL-77141 - Remove HALT from space_left_action - Broadcast warning to users when auditd is about to halt Resolves: RHEL-73111 - Fix TTY hostname in log messages Resolves: RHEL-79476 - permtab: remove unsupported syscalls from rules Resolves: RHEL-59560 - Restore permission on audit.rules - Rebase to 4.0.3 - Pluginst must have .conf suffix, otherwise skipped Resolves: RHEL-58838 - ausearch checkpoint inode fix Resolves: RHEL-62333 - Audisp-filter: filter audit events and forward them to other plugins Resolves: RHEL-5199 - Log to console when system is halted due to audit not having enough storage Resolves: RHEL-990 - auditctl: remove misleasing error with --input file Resolves: RHEL-5200 - Remove ProtectKernelModules=true from service file Resolves: RHEL-59571 - Update syscall tables to reflect current kernel Resolves: RHEL-46969 - af_unix: Restore old behavior Resolves: RHEL-39955 - Add systemd-tempfiles.d for audit when root fs is read-only Resolves: RHEL-45311 - ausearch fix error reporting Resolves: RHEL-32808 - Resolve ordering cycle when using remote logging Resolves: RHEL-59561 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix 'install' calls in post scriptlet - Don't do "live" operations during rpm-ostree composes - Auditd is stopping during upgrade (bz 2259610) - Fix: fails to parse /etc/fstab when there is a double comma after character resolves: RHEL-77279 - Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/ resolves: RHEL-113748 - Synchronize spec file with Fedora - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf resolves: RHEL-76283 - lenses/multipath.aug: Support all possible values for find_multipaths - lenses/systemd.aug: Allow "+"(fullprivileges) command flag - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to Fedora Rawhide version resolves: RHEL-55741 - Fix parsing of /etc/fstab resolves: RHEL-55741 - New upstream version 1.14.1 - Use github tarballs again. - New binary augprint. - New bash-completions subpackage. - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix: fails to parse /etc/fstab when there is a double comma after character resolves: RHEL-77279 - Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/ resolves: RHEL-113748 - Synchronize spec file with Fedora - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf resolves: RHEL-76283 - lenses/multipath.aug: Support all possible values for find_multipaths - lenses/systemd.aug: Allow "+"(fullprivileges) command flag - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to Fedora Rawhide version resolves: RHEL-55741 - Fix parsing of /etc/fstab resolves: RHEL-55741 - New upstream version 1.14.1 - Use github tarballs again. - New binary augprint. - New bash-completions subpackage. - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Ensure that we can transition from autoconf-latest to autoconf (RHEL-33538) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Modify spec file to support autoconf-latest package - Migrate to SPDX licences (#2222088) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update License string with the correct Exception name Resolves: RHEL-49926 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX licenses (#2222089) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2023.02.20 (#2171879) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - test: another check for PEP-3147 induced by Python 3.12.1 (RHEL-66594) - Filter ncompress out for rhel (RHEL-59969) - Fix pep3147_tweak regression (RHEL-59974) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX licenses (#2222090) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Port to modern C: various fixes - Fix test failure due to texinfo 7.0 update - Fix for CVE-2024-52615 (RHEL-67715) - Rebase to 0.9-rc2 (RHEL-78770) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix file attributes of /run/avahi-daemon (RHEL-55762) - fix SAST issues (RHEL-40016) - TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix for CVE-2024-52615 (RHEL-67715) - Rebase to 0.9-rc2 (RHEL-78770) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix file attributes of /run/avahi-daemon (RHEL-55762) - fix SAST issues (RHEL-40016) - TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix for CVE-2024-52615 (RHEL-67715) - Rebase to 0.9-rc2 (RHEL-78770) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix file attributes of /run/avahi-daemon (RHEL-55762) - fix SAST issues (RHEL-40016) - TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix for CVE-2024-52615 (RHEL-67715) - Rebase to 0.9-rc2 (RHEL-78770) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix file attributes of /run/avahi-daemon (RHEL-55762) - fix SAST issues (RHEL-40016) - TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to v2.33.0 - Update to 2.27.0 - Revise patches and update to 2.22.9 - Bump release for October 2024 mass rebuild: - Add less to recommended packages - Avoid jsonschema dep by skipping tests - RPMAUTOSPEC: unresolvable merge - Rebase to 0.7.0 [RHEL-99444] - Resolves: RHEL-99444 ([Azure][rhel-10] azure-vm-utils rebase) - Enable gating for azure-vm-utils - Initial commit on c10s - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable column reordering of FolderDisplay (RHEL-40874, RHEL-40875) - Bump release for June 2024 mass rebuild - Update to 46.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 45.alpha - Update to 44.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - test for BASH_VERSION to avoid running for other shells (#2279643, Nathan Grennan) - fix condition regression introduced in 0.4.1 linux console change - rename prompt_color_force variable to bash_prompt_color_force - also enable for Linux console (TERM=linux) - define PROMPT_COLOR - add PROMPT_USERHOST default variable - add colorpre and colorsuf variables - drop PROMPT_ERROR - drop built-in container support for now - reset color after $ prompt - only define default functions if setting PS1 - add PROMPT_SEPARATOR and PROMPT_DIRECTORY default variables (#2239152) - add optional PROMPT_START and PROMPT_END (replaces PROMPT_BRACKETS) - add prompt_default(), prompt_traditional(), and prompt_default_os() - expand README.md - add a container ⬢ symbol prefix - add PROMPT_DIR_COLOR to change the dir color (Thomas Steenholdt, #2239152) - also check for bash default prompt for login shell (Sam Morris, #2248853) - add PROMPT_BRACKETS to surround the prompt with traditional brackets (based on feedback from Thomas Steenholdt, #2239152) - only show error code if PROMPT_ERROR set - rename source package to shell-color-prompt - Rebuild with LLVM 21 (RHEL-108333) - Rebuild in a side-tag - Rebase to version 0.35.0 (RHEL-79002) - Fix bpf-ksnoop (RHEL-93852) - Fix bpf-javagc (RHEL-75531) - Fix bio* tools tracepoints (RHEL-99677) - Rebase to the latest version (RHEL-78921) - Rebuild with LLVM 20 (RHEL-81772) - Silence warning of trace tools (RHEL-68952) - Fix bpf-runqlen (RHEL-91190) - Fix sslsniff and sofdsnoop (RHEL-58348) - Fix slabratetop (RHEL-58810) - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947) - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529) - Fix multiples ppc64 tools (RHEL-58147) - Rebase to the latest version (RHEL-63886) - Fix gating tests of libbpf gating. - Explicitely disable blazesym support (RHEL-65850) - Fix LLVM 19 build (RHEL-64925) - Remove python3-pyelftools dependency (RHEL-60064) - Rebuild with LLVM 21 (RHEL-108333) - Rebuild in a side-tag - Rebase to version 0.35.0 (RHEL-79002) - Fix bpf-ksnoop (RHEL-93852) - Fix bpf-javagc (RHEL-75531) - Fix bio* tools tracepoints (RHEL-99677) - Rebase to the latest version (RHEL-78921) - Rebuild with LLVM 20 (RHEL-81772) - Silence warning of trace tools (RHEL-68952) - Fix bpf-runqlen (RHEL-91190) - Fix sslsniff and sofdsnoop (RHEL-58348) - Fix slabratetop (RHEL-58810) - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947) - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529) - Fix multiples ppc64 tools (RHEL-58147) - Rebase to the latest version (RHEL-63886) - Fix gating tests of libbpf gating. - Explicitely disable blazesym support (RHEL-65850) - Fix LLVM 19 build (RHEL-64925) - Remove python3-pyelftools dependency (RHEL-60064) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update to upstream version 6.8.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 6.8.0 - Convert License tag to SPDX format - Add missing build-requires - Update to upstream version 6.7.0 - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Release bump, fixed date for previous changelog entry Resolves: RHEL-78925 - Release 11.11, Support BIND 9.18 Resolves: RHEL-78925 - Replace dependency on openssl-pkcs11 by pkcs11-provider - Resolves: RHEL-30556 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for BIND 9.18.21 (#2255407) - Rebuilt for BIND 9.18.20 (#2249835) - Support for bind 9.18.19 (#2232346) - Require autoconf-archive at build time - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files too (RHEL-252999) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Reject out-of-zone NSEC next owner names (CVE-2026-13321) - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622) - Fix RRSIG label count validation for wildcard cache poisoning (CVE-2026-11721) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix assertion failure on malformed NSEC/NSEC3 responses (CVE-2026-13204) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Move named.* files from /var/named into /usr/share/named - Move named.ca into /etc/named.ca - Fix failures in idna system test (RHEL-66172) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Add bison to BuildRequires for RISC-V - Disable LTO for RISC-V - Disable testsuite for RISC-V - Run linker tests for cross binutils. Compare the native and cross results. (RHEL-117111) - Fix a potential illegal memory access when copying a corrupt input file. (RHEL-142279) - Fix a potential illegal memory access when copying a corrupt input file. (RHEL-132254) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-126877) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-125205) - Remove workaround for CVE-2025-5702. (RHEL-100159) - Add fix for CVE-2025-5244. (RHEL-100417) - USe correct fix for CVE-2025-5702. (RHEL-100159) - Add basic support for RISC-V 64-bit EFI objects. (RHEL-88815) - Adds z17 as a cpu name for the s390x architecture. (RHEL-87215) - Add bison to BuildRequires for RISC-V - Disable LTO for RISC-V - Disable testsuite for RISC-V - Run linker tests for cross binutils. Compare the native and cross results. (RHEL-117111) - Fix a potential illegal memory access when copying a corrupt input file. (RHEL-142279) - Fix a potential illegal memory access when copying a corrupt input file. (RHEL-132254) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-126877) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-125205) - Remove workaround for CVE-2025-5702. (RHEL-100159) - Add fix for CVE-2025-5244. (RHEL-100417) - USe correct fix for CVE-2025-5702. (RHEL-100159) - Add basic support for RISC-V 64-bit EFI objects. (RHEL-88815) - Adds z17 as a cpu name for the s390x architecture. (RHEL-87215) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Analyse bison sources for license information - Migrate License field to SPDX identifiers for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2 (#2222079) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Analyse bison sources for license information - Migrate License field to SPDX identifiers for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2 (#2222079) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add explicit requires to the devel subpackages - Resolves: RHEL-60890 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package - update to 3.12.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763 - Adapt license tag to SPDX - AlmaLinux changes: Enable Btrfs support - Fix getting iSCSI firmware initiator name Resolves: RHEL-145882 - Fix luks save_passphrase for missing format context Resolves: RHEL-142610 - iSCSI: don't crash when LUN ID >= 256 Resolves: RHEL-122305 - Remove the safe_dbus module Related: RHEL-122305 - Temporarily reintroduce the safe_dbus module Related: RHEL-115005 - Update to blivet 3.13.0 upstream release Resolves: RHEL-115005 - Add a pre-wipe fixup function for LVM logical volumes Resolves: RHEL-93966 - tests: Change expected Stratis metadata size for stratisd 3.7.0 Resolves: RHEL-102299 - Tell LVM DBus to refresh it's internal status during reset Resolves: RHEL-93967 - Wipe end partition before creating it as well as the start Resolves: RHEL-93967 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix hang when BLKTRACESETUP fails and "-o -" is used - Related: RHEL-54662 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 5.85 Resolves: RHEL-142551 - Fix problem with menu handling Resolves: RHEL-103965 - Update to 5.83 - Resolves: RHEL-94817 - Fix startup warnings - Resolves: RHEL-88703 - Add OSCI tests - Resolves: RHEL-77171 - Fix config not being applied - Resolves: RHEL-78405 - Fix wordexp() related crasher - Resolves: RHEL-56021 - Update gating and rpminspect files - Related: Jira:RHEL-76183 - Related: Jira:RHEL-54482 - Update to 5.85 Resolves: RHEL-142551 - Fix problem with menu handling Resolves: RHEL-103965 - Update to 5.83 - Resolves: RHEL-94817 - Fix startup warnings - Resolves: RHEL-88703 - Add OSCI tests - Resolves: RHEL-77171 - Fix config not being applied - Resolves: RHEL-78405 - Fix wordexp() related crasher - Resolves: RHEL-56021 - Update gating and rpminspect files - Related: Jira:RHEL-76183 - Related: Jira:RHEL-54482 - Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print - Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19 Among others fixes ipmievd startup (fedora#2303185) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update IANA numbers - Apply patch from CentOS Stream, never applied upstream: Disable retry of pre-session "Get cipher suites" command as some BMCs are ignoring it (#1831158) - Apply patches from Debian, never applied upstream: - fix tsol buffer overflow, https://sourceforge.net/p/ipmitool/mailman/message/24405281/ - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/ - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to release 1.6.8 - Resolves: RHEL-111710 - Update to release 1.6.5 - Resolves: RHEL-59511 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to release 1.6.3 - Resolves: RHEL-37489 - Rebuild for new gating configuration - Resolves: RHEL-37489 - Update to release 1.6.1. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to release 1.6.0. - Update to release 1.6.8 - Resolves: RHEL-111710 - Update to release 1.6.5 - Resolves: RHEL-59511 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to release 1.6.3 - Resolves: RHEL-37489 - Rebuild for new gating configuration - Resolves: RHEL-37489 - Update to release 1.6.1. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to release 1.6.0. - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add boost-url dependency to metapackage Resolves: RHEL-124169 - Backport patch to fix build of boost thread on Clang19 and later Resolves: RHEL-118607 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Add RISC-V support - Release 1.15.2 - Backport: https://github.com/bootc-dev/bootc/pull/2114 - Release 1.15.1 - Update to 1.14.1 - Release 1.13.0 - Update to bootc 1.13.0 - Pass CARGO_FEATURES explicitly to make install to prevent auto-detection rebuild in install environment (workaround for upstream Makefile issue) - Package shell completions (bash, zsh, fish) - Skip rpminspect checking for symbolic link /usr/lib/bootc/storage - Release 1.12.1 - Release 1.12.0 - Release 1.11.0 - Add RISC-V support - spec: new upstream version 1.16.4 - Release 1.15.2 - Release 1.15.1 - Update to 1.14.1 - Release 1.13.0 - Update to bootc 1.13.0 - Pass CARGO_FEATURES explicitly to make install to prevent auto-detection rebuild in install environment (workaround for upstream Makefile issue) - Package shell completions (bash, zsh, fish) - Skip rpminspect checking for symbolic link /usr/lib/bootc/storage - Release 1.12.1 - Release 1.12.0 - Release 1.11.0 - Add RISC-V support - Backport https://github.com/bootc-dev/bootc/pull/2485 - spec: new upstream version 1.16.4 - Release 1.15.2 - Release 1.15.1 - Update to 1.14.1 - Release 1.13.0 - Update to bootc 1.13.0 - Pass CARGO_FEATURES explicitly to make install to prevent auto-detection rebuild in install environment (workaround for upstream Makefile issue) - Package shell completions (bash, zsh, fish) - Skip rpminspect checking for symbolic link /usr/lib/bootc/storage - Release 1.12.1 - Release 1.12.0 - Backport https://github.com/coreos/bootupd/pull/1068 - Update to 0.2.33 - Update to 0.2.32 - Update to 0.2.31 - Update to 0.2.29 - Backport the PR that will use an already mounted ESP for installation - Update to 0.2.28 - spec: Add BR on git - Update to 0.2.27 - https://github.com/coreos/bootupd/releases/tag/v0.2.25 Resolves: RHEL-71041 - Update to v0.2.35 - Rebase to v0.2.34 - Backport https://github.com/coreos/bootupd/pull/1068 - Update to 0.2.33 - Update to 0.2.32 - Update to 0.2.31 - Update to 0.2.29 - Backport the PR that will use an already mounted ESP for installation - Update to 0.2.28 - spec: Add BR on git - Fix LLVM feature detection and rebuild with LLVM 21 - Update to kernel rebase 6.17 - Make kernel tarball dist independent of %{dist} - Update to kernel rebase 6.14 - Update to kernel rebase 6.13 - Initial gating test for bpftool - Initial commit on c10s - Rebuild with LLVM 21 (RHEL-108334) - Rebase to upstream version 0.24.2 - Rebase to upstream version 0.24.1 (RHEL-79000) - Rebase to upstream version 0.23.5 which fixes an issue with kstack/ustack on s390x (RHEL-96958) - Rebase to upstream version 0.23.2 (RHEL-78919) - Rebuild for LLVM 20 (RHEL-81774) - Enable riscv64 - Rebase to upstream version 0.22.1 (RHEL-63882) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild for LLVM 19 - Resolves: RHEL-64926 - Rebased to version 0.21.1 - Resolves: RHEL-36076 - Rebuilt for LLVM 18 - Resolves: RHEL-27729 - Enable gating - Resolves: RHEL-45249 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough Resolves: RHEL-46310 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Added SPDX licenses found by ScanCode - Dropped redundant license tags from subpackages - Migrate group creation to sysusers - Bump release and rebuild - OCaml 5.1.1 + s390x code gen fix for Fedora 40 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough Resolves: RHEL-46310 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Added SPDX licenses found by ScanCode - Dropped redundant license tags from subpackages - Migrate group creation to sysusers - Bump release and rebuild - OCaml 5.1.1 + s390x code gen fix for Fedora 40 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough Resolves: RHEL-46310 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Added SPDX licenses found by ScanCode - Dropped redundant license tags from subpackages - Migrate group creation to sysusers - Bump release and rebuild - OCaml 5.1.1 + s390x code gen fix for Fedora 40 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough Resolves: RHEL-46310 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Added SPDX licenses found by ScanCode - Dropped redundant license tags from subpackages - Migrate group creation to sysusers - Bump release and rebuild - OCaml 5.1.1 + s390x code gen fix for Fedora 40 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough Resolves: RHEL-46310 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Added SPDX licenses found by ScanCode - Dropped redundant license tags from subpackages - Migrate group creation to sysusers - Bump release and rebuild - OCaml 5.1.1 + s390x code gen fix for Fedora 40 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough Resolves: RHEL-46310 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Added SPDX licenses found by ScanCode - Dropped redundant license tags from subpackages - Migrate group creation to sysusers - Bump release and rebuild - OCaml 5.1.1 + s390x code gen fix for Fedora 40 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough Resolves: RHEL-46310 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Added SPDX licenses found by ScanCode - Dropped redundant license tags from subpackages - Migrate group creation to sysusers - Bump release and rebuild - OCaml 5.1.1 + s390x code gen fix for Fedora 40 - Resolves: RHEL-133984 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Accept output_buffer_limit as an alias for max_output_length in Decompressor.process() for forward compatibility with upstream 1.2.0 - Resolves: RHEL-221151 - Resolves: RHEL-133984 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Resolves: RHEL-133984 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Accept output_buffer_limit as an alias for max_output_length in Decompressor.process() for forward compatibility with upstream 1.2.0 - Resolves: RHEL-221151 - Resolves: RHEL-133984 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Related: CVE-2026-14164 - Resolves: CVE-2026-14164 - Resolves: CVE-2026-4424 - Release bump for typo in dist - Release bump - Resolves: CVE-2026-4111 - Resolves: CVE-2025-5914 - Resolves: CVE-2025-25724 - Fix for CVE-2024-57970 - Resolves: RHEL-79877 - Rebase to version 3.7.7 - Fixing SAST issues, accepted by upstream - Resolves: RHEL-39391 RHEL-67895 - Related: CVE-2026-16517 and CVE-2026-15028 - Related: CVE-2026-14164 - Resolves: CVE-2026-14164 - Resolves: CVE-2026-4424 - Release bump for typo in dist - Release bump - Resolves: CVE-2026-4111 - Resolves: CVE-2025-5914 - Resolves: CVE-2025-25724 - Fix for CVE-2024-57970 - Resolves: RHEL-79877 - Resolves: CVE-2026-4424 - Release bump for typo in dist - Release bump - Resolves: CVE-2026-4111 - Resolves: CVE-2025-5914 - Resolves: CVE-2025-25724 - Fix for CVE-2024-57970 - Resolves: RHEL-79877 - Rebase to version 3.7.7 - Fixing SAST issues, accepted by upstream - Resolves: RHEL-39391 RHEL-67895 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix CVE-2024-48957 - Resolves: RHEL-62015 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Switch Java compiler source/target to 1.8 - Resolves: RHEL-52687 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add RHEL-only downstream patch to disable raid56 modes for now - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to version 6.12 - Resolves: rhbz#2329568 - Update to 6.11 Resolves: rhbz#2312879 - Update to version 6.10.1 - Resolves: rhbz#2305131 - Update to version 6.10 - Resolves: rhbz#2301782 - Update to 6.9.2 - Backport fix for Python 3.13 (rhbz#2245650) - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for Python 3.13 - Update to 6.9 - Add RHEL-only downstream patch to disable raid56 modes for now - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to version 6.12 - Resolves: rhbz#2329568 - Update to 6.11 Resolves: rhbz#2312879 - Update to version 6.10.1 - Resolves: rhbz#2305131 - Update to version 6.10 - Resolves: rhbz#2301782 - Update to 6.9.2 - Backport fix for Python 3.13 (rhbz#2245650) - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for Python 3.13 - Update to 6.9 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-114411 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.2 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.0 - Related: RHEL-80817 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-114411 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.2 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80817 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-114411 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.2 - Related: RHEL-80817 - rebuild for CVE-2026-39822 - Resolves: RHEL-193643 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-114411 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80817 - rebuild for CVE-2026-33810 - Resolves: RHEL-229833 - rebuild for CVE-2026-39822 - Resolves: RHEL-193643 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-114411 - Rebuild for golang CVE fixes - Resolves: RHEL-229833 RHEL-241142 RHEL-241389 RHEL-241658 RHEL-241706 RHEL-242148 RHEL-251830 - rebuild for CVE-2026-33810 - Resolves: RHEL-229833 - rebuild for CVE-2026-39822 - Resolves: RHEL-193643 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - Rebuild for CVE-2026-111943 - Resolves: RHEL-287469 - Rebuild for golang CVE fixes - Resolves: RHEL-229833 RHEL-241142 RHEL-241389 RHEL-241658 RHEL-241706 RHEL-242148 RHEL-251830 - rebuild for CVE-2026-33810 - Resolves: RHEL-229833 - rebuild for CVE-2026-39822 - Resolves: RHEL-193643 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-114411 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.2 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.0 - Related: RHEL-80817 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-114411 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.2 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80817 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-114411 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80817 - update to https://github.com/containers/buildah/releases/tag/v1.41.2 - Related: RHEL-80817 - rebuild for CVE-2026-39822 - Resolves: RHEL-193643 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-114411 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80817 - rebuild for CVE-2026-33810 - Resolves: RHEL-229833 - rebuild for CVE-2026-39822 - Resolves: RHEL-193643 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-114411 - Rebuild for golang CVE fixes - Resolves: RHEL-229833 RHEL-241142 RHEL-241389 RHEL-241658 RHEL-241706 RHEL-242148 RHEL-251830 - rebuild for CVE-2026-33810 - Resolves: RHEL-229833 - rebuild for CVE-2026-39822 - Resolves: RHEL-193643 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-122178 - Rebuild for CVE-2026-111943 - Resolves: RHEL-287469 - Rebuild for golang CVE fixes - Resolves: RHEL-229833 RHEL-241142 RHEL-241389 RHEL-241658 RHEL-241706 RHEL-242148 RHEL-251830 - rebuild for CVE-2026-33810 - Resolves: RHEL-229833 - rebuild for CVE-2026-39822 - Resolves: RHEL-193643 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158476 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]" - Resolves: RHEL-164030 - Switch from GnuPG to Sequoia for container image signature verification - Enable containers_image_sequoia build tag and add podman-sequoia dependency - Resolves: RHEL-56366 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149240 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-122178 - new version - new version - new version - new version - new version - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - new version - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt to re-trigger automated bodhi (Fedora Updates System) tests - Analyse byacc sources for license information - Migrate License field to SPDX identifiers for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2 (#2222081) - Rebase to byacc-2.0.20230521 (#2208910) - Rebase to byacc-2.0.20230219 (#2156901) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebase to byacc-2.0-20221106 (#2141488) - Rebuild to fix main-class attribute of module-info - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Port to OpenJDK 21 - Resolves: RHEL-52717 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Build with Jurand instead of deprecated javapackages-extra - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for updated gating tests Related: RHEL-70753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump release for test run. - Bump release. - Really rebuild with java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Build with Java 17 - Bump release for updated gating tests Related: RHEL-70753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump release for test run. - Bump release. - Really rebuild with java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Build with Java 17 - Bump release for updated gating tests Related: RHEL-70753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump release for test run. - Bump release. - Really rebuild with java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Build with Java 17 - Revert the changes from 1.0.8-23 Resolves: RHEL-71750 - Fix an off by one error in bzip2recover.c Resolves: RHEL-36503 - Fix out of bounds write in bz_decompress Resolves: CVE-2019-12900 - Minor spec cleanup - Add explicit requires for the bzip2 package Resolves: RHEL-69797 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild with enabled gating Resolves: RHEL-52100 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - gpgverify source tarball - Update to 1.34.6 Resolves: RHEL-103761 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Resolves: RHEL-30025 - Out of bounds read in ares__read_line() [rhel-10.0] - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 1.25.0 - Fix double-free in process_timeouts() (CVE-2026-33630) Resolves: RHEL-192867 - Update to 1.34.6 Resolves: RHEL-103761 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - move to libcupsfilters-devel and libppd-devel - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Port to C99 (#2152430) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.18.2 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.18.0 - Drop the xml surface and cairo-sphinx tool as they've been removed upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix crash due to scaled_glyph->dev_private reuse (#2189228) - Fix missing glyphs in ft-font - Rebuild for new freetype-2.13.0 - Backport an upstream patch to fix printing PDFs - Resolves: RHEL-238394 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.18.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.18.2 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.18.0 - Drop the xml surface and cairo-sphinx tool as they've been removed upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix crash due to scaled_glyph->dev_private reuse (#2189228) - Fix missing glyphs in ft-font - Rebuild for new freetype-2.13.0 - Backport an upstream patch to fix printing PDFs - Resolves: RHEL-238394 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.18.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.18.2 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.18.0 - Drop the xml surface and cairo-sphinx tool as they've been removed upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix crash due to scaled_glyph->dev_private reuse (#2189228) - Fix missing glyphs in ft-font - Rebuild for new freetype-2.13.0 - Backport an upstream patch to fix printing PDFs - Resolves: RHEL-238394 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.18.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.18.2 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.18.0 - Drop the xml surface and cairo-sphinx tool as they've been removed upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix crash due to scaled_glyph->dev_private reuse (#2189228) - Fix missing glyphs in ft-font - Rebuild for new freetype-2.13.0 - Backport an upstream patch to fix printing PDFs - Resolves: RHEL-238394 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.18.2 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - gating enabled - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.18.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use new (rpm 4.17.1+) bcond style - Removed superfluous processing of the OpenPGP key. - Revert "Work around missing dependency on texlive-wasy" - Rebuild for rhel-10.2 - Fix CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-141553 - Fix CVE-2025-68114 (memory corruption) Resolves: RHEL-137749 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuilt with java-21-openjdk as default JDK: https://issues.redhat.com/browse/RHEL-34597 - Bump release for June 2024 mass rebuild - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - update to https://github.com/openSUSE/catatonit/releases/tag/v0.2.1 - Related: RHEL-58990 - Add missing symlink and rebuild - Resolves: RHEL-71134 - update to https://github.com/openSUSE/catatonit/releases/tag/v0.2.0 - Resolves: RHEL-70589 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Upgrade to 1.5.6 (#2216132) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to version 0.3.17 - related: RHEL-121729 - Update to version 0.3.16 - Update to version 0.3.13 - resolves: RHEL-134736 - Update to version 0.3.12 - resolves: RHEL-121729 - Added channel binding support - resolves: RHEL-103400 - Bump release for October 2024 mass rebuild: - Update to version 0.3.9 - Add gating files from c9s - Bump release for June 2024 mass rebuild - Fix installing cepces-selinux - Require selinux package if selinux is enabled - Fix cepces-certmonger postinstall script - resolves: RHEL-215376 - Update to version 0.3.17 - related: RHEL-121729 - Update to version 0.3.16 - Update to version 0.3.13 - resolves: RHEL-134736 - Update to version 0.3.12 - resolves: RHEL-121729 - Added channel binding support - resolves: RHEL-103400 - Bump release for October 2024 mass rebuild: - Update to version 0.3.17 - related: RHEL-121729 - Update to version 0.3.16 - Update to version 0.3.13 - resolves: RHEL-134736 - Update to version 0.3.12 - resolves: RHEL-121729 - Added channel binding support - resolves: RHEL-103400 - Bump release for October 2024 mass rebuild: - Update to version 0.3.9 - Add gating files from c9s - Bump release for June 2024 mass rebuild - Fix installing cepces-selinux - Require selinux package if selinux is enabled - Fix cepces-certmonger postinstall script - resolves: RHEL-215376 - Update to version 0.3.17 - related: RHEL-121729 - Update to version 0.3.16 - Update to version 0.3.13 - resolves: RHEL-134736 - Update to version 0.3.12 - resolves: RHEL-121729 - Added channel binding support - resolves: RHEL-103400 - Bump release for October 2024 mass rebuild: - Update to version 0.3.17 - related: RHEL-121729 - Update to version 0.3.16 - Update to version 0.3.13 - resolves: RHEL-134736 - Update to version 0.3.12 - resolves: RHEL-121729 - Added channel binding support - resolves: RHEL-103400 - Bump release for October 2024 mass rebuild: - Update to version 0.3.9 - Add gating files from c9s - Bump release for June 2024 mass rebuild - Fix installing cepces-selinux - Require selinux package if selinux is enabled - Fix cepces-certmonger postinstall script - resolves: RHEL-215376 - Update to version 0.3.17 - related: RHEL-121729 - Update to version 0.3.16 - Update to version 0.3.13 - resolves: RHEL-134736 - Update to version 0.3.12 - resolves: RHEL-121729 - Added channel binding support - resolves: RHEL-103400 - Bump release for October 2024 mass rebuild: - Update to upstream 0.79.21 (RHEL-113257) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to upstream 0.79.20 - Update tests to be compatible with OpenSSL 3.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix C compatibility issues - Update to upstream 0.79.19 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Switch to SPDX license string. - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Remove the CC-BY-NC index.html file from the tarball (#2290306) - Remove the CC-BY-NC website from the tarball (#2290306) - Fix check-devel for cmake users (rhbz#2161231) - Simplify conditional logic for mingw - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update deprecated %patch macro usage - Add optional Fedora mingw packages. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Remove the CC-BY-NC index.html file from the tarball (#2290306) - Remove the CC-BY-NC website from the tarball (#2290306) - Fix check-devel for cmake users (rhbz#2161231) - Simplify conditional logic for mingw - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update deprecated %patch macro usage - Add optional Fedora mingw packages. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Remove the CC-BY-NC index.html file from the tarball (#2290306) - Remove the CC-BY-NC website from the tarball (#2290306) - Fix check-devel for cmake users (rhbz#2161231) - Simplify conditional logic for mingw - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update deprecated %patch macro usage - Add optional Fedora mingw packages. - SELinux userspace 3.10 release - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.8-rc1 release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - SELinux userspace 3.7 release - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to CIM Schema 2.54.1, including experimental classes - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add gating tests configuration - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebase to version 0.6.2.2. Solves CVE-2023-37464. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix CVE-2026-53938: heap buffer overflow in AES key unwrap Resolves: RHEL-256962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix CVE-2026-53939 cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption Resolves: RHEL-276901 - Fix CVE-2026-53938: heap buffer overflow in AES key unwrap Resolves: RHEL-256962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - Bump to release-46 - Bump release for October 2024 mass rebuild: - Fix a forbidden code point, 0x202E - RPMAUTOSPEC: unresolvable merge - Bump to release-46 - Bump release for October 2024 mass rebuild: - Fix a forbidden code point, 0x202E - RPMAUTOSPEC: unresolvable merge - Add clevis user to tss group via sysusers - Include socat, openssl as PKCS#11 pin requirements - Include tpm2_getcap as dracut required binary - TPM2 use first PCR algorithm bank supported by TPM - Bump release for October 2024 mass rebuild: - Split PKCS#11 files into clevis-pin-pkcs11 package - Fix clevis v21 tang functionality at boot time - Fix clevis v21 tang functionality at boot time - Rebase to clevis-21 upstream version - Bump release for June 2024 mass rebuild - Add clevis user to tss group via sysusers - Include socat, openssl as PKCS#11 pin requirements - Include tpm2_getcap as dracut required binary - TPM2 use first PCR algorithm bank supported by TPM - Bump release for October 2024 mass rebuild: - Split PKCS#11 files into clevis-pin-pkcs11 package - Fix clevis v21 tang functionality at boot time - Fix clevis v21 tang functionality at boot time - Rebase to clevis-21 upstream version - Bump release for June 2024 mass rebuild - Add clevis user to tss group via sysusers - Include socat, openssl as PKCS#11 pin requirements - Include tpm2_getcap as dracut required binary - TPM2 use first PCR algorithm bank supported by TPM - Bump release for October 2024 mass rebuild: - Split PKCS#11 files into clevis-pin-pkcs11 package - Fix clevis v21 tang functionality at boot time - Fix clevis v21 tang functionality at boot time - Rebase to clevis-21 upstream version - Bump release for June 2024 mass rebuild - Add clevis user to tss group via sysusers - Include socat, openssl as PKCS#11 pin requirements - Include tpm2_getcap as dracut required binary - TPM2 use first PCR algorithm bank supported by TPM - Bump release for October 2024 mass rebuild: - Split PKCS#11 files into clevis-pin-pkcs11 package - Fix clevis v21 tang functionality at boot time - Fix clevis v21 tang functionality at boot time - Rebase to clevis-21 upstream version - Bump release for June 2024 mass rebuild - Add JSON schema validation to reject unknown fields Resolves: RHEL-138591 - Package rebuild to retrieve latest rust-openssl version Resolves: RHEL-77723 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - ci_tests.fmf plan update for gating testing - Fix summary in ci_tests.fmf - Enable gating for c10s - Initial commit on c10s - Add clevis user to tss group via sysusers - Include socat, openssl as PKCS#11 pin requirements - Include tpm2_getcap as dracut required binary - TPM2 use first PCR algorithm bank supported by TPM - Bump release for October 2024 mass rebuild: - Split PKCS#11 files into clevis-pin-pkcs11 package - Fix clevis v21 tang functionality at boot time - Fix clevis v21 tang functionality at boot time - Rebase to clevis-21 upstream version - Bump release for June 2024 mass rebuild - Add clevis user to tss group via sysusers - Include socat, openssl as PKCS#11 pin requirements - Include tpm2_getcap as dracut required binary - TPM2 use first PCR algorithm bank supported by TPM - Bump release for October 2024 mass rebuild: - Split PKCS#11 files into clevis-pin-pkcs11 package - Fix clevis v21 tang functionality at boot time - Fix clevis v21 tang functionality at boot time - Rebase to clevis-21 upstream version - Bump release for June 2024 mass rebuild - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128097] - Resolves: RHEL-128097 ([rhel-10] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf) - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100617] - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100617] - Resolves: RHEL-100617 (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-10.1]) - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88659] - Resolves: RHEL-88659 (cloudinit backport optimization features on Alibaba Cloud) - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81896] - Resolves: RHEL-81896 (DataSourceNoCloudNet network configuration is ineffective [rhel-10]) - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-73667] - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-79727] - Resolves: RHEL-73667 (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [rhel-10]) - Resolves: RHEL-79727 ([c10s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network) - Fix config missed on rebase [RHEL-77206] - Resolves: RHEL-77206 (cloud-init has reacquired a dependency on python-jsonschema) - Rebase to 24.4 [RHEL-66254] - Resolves: RHEL-66254 ([RHEL-10] Rebase cloud-init to 24.4 version) - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65769] - Resolves: RHEL-65769 ([RHEL-10] Prevent NM from handling DNS when network interfaces have DNS config) - ci-Remove-python3-jsonschema-dependency.patch [RHEL-65849] - Resolves: RHEL-65849 ([RHEL-10] Drop cloud-init dependency on python-jsonschema) - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-65016] - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-65019] - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-65019] - Resolves: RHEL-65016 (Configuring metric for default gateway is not working [rhel-10]) - Resolves: RHEL-65019 (NoCloud - network_config bridges incorrectly configured [rhel-10]) - fix(network-manager): set the MAC on rendered bond connections - ci-fix-Pass-interface-string-to-get_newest_lease-6648.patch [RHEL-159033] - ci-fix-cloudstack-Improve-domain-name-DHCP-lease-lookup.patch [RHEL-159033] - ci-downstream-fix-test_cloudstack.py-since-pytest-fixtu.patch [RHEL-159033] - Resolves: RHEL-159033 ([GSS][Secure Support] [RHEL-10] cloud-init requests lease before DHCP can provide one [rhel-10.2.z]) - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128097] - Resolves: RHEL-128097 ([rhel-10] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf) - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100617] - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100617] - Resolves: RHEL-100617 (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-10.1]) - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88659] - Resolves: RHEL-88659 (cloudinit backport optimization features on Alibaba Cloud) - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81896] - Resolves: RHEL-81896 (DataSourceNoCloudNet network configuration is ineffective [rhel-10]) - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-73667] - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-79727] - Resolves: RHEL-73667 (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [rhel-10]) - Resolves: RHEL-79727 ([c10s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network) - Fix config missed on rebase [RHEL-77206] - Resolves: RHEL-77206 (cloud-init has reacquired a dependency on python-jsonschema) - Rebase to 24.4 [RHEL-66254] - Resolves: RHEL-66254 ([RHEL-10] Rebase cloud-init to 24.4 version) - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65769] - Resolves: RHEL-65769 ([RHEL-10] Prevent NM from handling DNS when network interfaces have DNS config) - ci-fix-Pass-interface-string-to-get_newest_lease-6648.patch [RHEL-159033] - ci-fix-cloudstack-Improve-domain-name-DHCP-lease-lookup.patch [RHEL-159033] - ci-downstream-fix-test_cloudstack.py-since-pytest-fixtu.patch [RHEL-159033] - Resolves: RHEL-159033 ([GSS][Secure Support] [RHEL-10] cloud-init requests lease before DHCP can provide one [rhel-10.2.z]) - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128097] - Resolves: RHEL-128097 ([rhel-10] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf) - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100617] - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100617] - Resolves: RHEL-100617 (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-10.1]) - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88659] - Resolves: RHEL-88659 (cloudinit backport optimization features on Alibaba Cloud) - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81896] - Resolves: RHEL-81896 (DataSourceNoCloudNet network configuration is ineffective [rhel-10]) - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-73667] - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-79727] - Resolves: RHEL-73667 (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [rhel-10]) - Resolves: RHEL-79727 ([c10s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network) - Fix config missed on rebase [RHEL-77206] - Resolves: RHEL-77206 (cloud-init has reacquired a dependency on python-jsonschema) - Rebase to 24.4 [RHEL-66254] - Resolves: RHEL-66254 ([RHEL-10] Rebase cloud-init to 24.4 version) - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65769] - Resolves: RHEL-65769 ([RHEL-10] Prevent NM from handling DNS when network interfaces have DNS config) - ci-Remove-python3-jsonschema-dependency.patch [RHEL-65849] - Resolves: RHEL-65849 ([RHEL-10] Drop cloud-init dependency on python-jsonschema) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095] - Resolves: RHEL-36095 (Remove cloud-utils-growpart dependency on obsolete gdisk) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Fix conflicting license files in cmake and cmake-doc - Update version to 3.30.5 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Improve C compatibility of LoadCommand tests - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Fix conflicting license files in cmake and cmake-doc - Update version to 3.30.5 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Improve C compatibility of LoadCommand tests - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Fix conflicting license files in cmake and cmake-doc - Update version to 3.30.5 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Improve C compatibility of LoadCommand tests - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Fix conflicting license files in cmake and cmake-doc - Update version to 3.30.5 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Improve C compatibility of LoadCommand tests - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Fix conflicting license files in cmake and cmake-doc - Update version to 3.30.5 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Improve C compatibility of LoadCommand tests - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Fix conflicting license files in cmake and cmake-doc - Update version to 3.30.5 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Improve C compatibility of LoadCommand tests - Convert license headers to SPDX format - Packaging fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Bug fixes and translation updates - Bug fixes and translation updates - Performance and stability improvements - don't initialise a git repo in gating tests (fixes fedora gating) - Translations and dependency updates - Bug fixes and translation updates - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Resolve CVE-2025-13465 and CVE-2026-4800 - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Resolve CVE-2025-13465 and CVE-2026-4800 - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Convert license headers to SPDX format - Bug fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Performance improvements - Translation updates - New virtual machines don't get SPICE graphics anymore - Support for network port forwarding - Bug fixes and translation updates - Port forwarding for user session VMs - "Shutdown and restart" action - Faster startup - Memory usage now shows numbers reported by the guest (RHEL-116731) - Bug fixes and translation updates - Improved UX for Disks and Network interface tables - Bug fixes and translation updates - CVE-2026-92768 (RHEL-263124) - CVE-2026-92747 (RHEL-263120) - CVE-2026-92745 (RHEL-263113) - Convert license headers to SPDX format - Bug fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Performance improvements - Translation updates - New virtual machines don't get SPICE graphics anymore - Support for network port forwarding - Bug fixes and translation updates - Port forwarding for user session VMs - "Shutdown and restart" action - Faster startup - Memory usage now shows numbers reported by the guest (RHEL-116731) - Bug fixes and translation updates - Convert license headers to SPDX format - Packaging fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Dependency updates - Translation and dependency updates - Performance and stability improvements - Translations and dependency updates - Bug fixes and translation updates - Site-specific branding support - Bug fixes and translation updates - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - Bug fixes and translation updates - ws: Prevent remote code execution with SSH argument injection (RHEL-158306) - node: update lodash dependency (RHEL-164067) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - ws: Prevent remote code execution with SSH argument injection (RHEL-158306) - node: update lodash dependency (RHEL-164067) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - sosreport: Provide encryption pass via an env variable (RHEL-220574) - ws: Prevent remote code execution with SSH argument injection (RHEL-158306) - node: update lodash dependency (RHEL-164067) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Convert license headers to SPDX format - Packaging fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Release automation bugfix - Bug fixes and translation updates - Performance and stability improvements - Support stopping/starting/restart quadlets - List stopped quadlets - Translations and dependency updates - Bug fixes and translation updates - Rebase to upstream release 20 - Rebase to upstream release 17 - Config: Use authselect enable-feature when possible - Test: Move from CDP to BiDi - Replace jQuery extend() with standard JS spread - Convert to TypeScript - Convert Application to a functional component - package.json: Drop date-fns - Various test fixes and build related fixes - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release to validate gating - Bump release for June 2024 mass rebuild - Config: Add sssd-proxy requirement - Config: Update to authselect with-tlog feature - stylelint: handle stylelint-scss deprecation - Add ruff configuration - package.json: drop flowtype plugin - package.json: drop po2json - package.json: document the required nodejs version - fmf: Plumb through $TEST_* variables for unexpected messages - tests: Use mc for testPlayBinary - package.json: drop deprecated eslint-plugin-standard - Revert "build: add support for /pybridge scenario" - Player: Stop making the Terminal object state - build.js: support flags - packaging: Update spec License: to SPDX format - build.js: Fix LINT env variable check - Tests: Allow charset journal messages - Update to the new root creation function - package.json: Bump stylelint to 15 - test: add check for sssd config id_provider proxy - Tests: Allow invalid non-UTF8 journal messages - Add xterm-canvas-addon dependency for rendering - Minor Eslint fixes - Tests: Update data list to PF5 for testAppMenu - Update org.cockpit-project.session-recording.metainfo.xml - Makefile: bump our test/common dependency - patternfly-5-overrides should be auto-imported by the page.scss file - Drop obsolete pf-m-redhat-font class - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - Bug fixes and translation updates - ws: Prevent remote code execution with SSH argument injection (RHEL-158306) - node: update lodash dependency (RHEL-164067) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - ws: Prevent remote code execution with SSH argument injection (RHEL-158306) - node: update lodash dependency (RHEL-164067) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - sosreport: Provide encryption pass via an env variable (RHEL-220574) - ws: Prevent remote code execution with SSH argument injection (RHEL-158306) - node: update lodash dependency (RHEL-164067) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - gating enabled - Backport a patch to fix ProtectSystem=strict - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release - Fix mass-rebuild failure - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Provide a sysusers.d file to get user() and group() provides - Rebuild for glib2 symbol export fix (#2232723) - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Bump release for June 2024 mass rebuild - New upstream version - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Bump release for June 2024 mass rebuild - New upstream version - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - gating enabled - Backport a patch to fix ProtectSystem=strict - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release - Fix mass-rebuild failure - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Provide a sysusers.d file to get user() and group() provides - Rebuild for glib2 symbol export fix (#2232723) - RPMAUTOSPEC: unresolvable merge - Update to https://github.com/containers/composefs/releases/tag/v1.0.8 - Fix build - Related: RHEL-60292 - composefs-1.0.7-1.el10 - update to https://github.com/containers/composefs/releases/tag/v1.0.7 - Related: RHEL-60292 - Bump release for October 2024 mass rebuild: - update to the latest upstream release https://github.com/containers/composefs/releases/tag/v1.0.6 Related: RHEL-60292 - composefs-1.0.5-1.el10 - update to https://github.com/containers/composefs/releases/tag/v1.0.5 - Related: RHEL-34195 - Update to 1.0.4 - Update to https://github.com/containers/composefs/releases/tag/v1.0.8 - Fix build - Related: RHEL-60292 - composefs-1.0.7-1.el10 - update to https://github.com/containers/composefs/releases/tag/v1.0.7 - Related: RHEL-60292 - Bump release for October 2024 mass rebuild: - update to the latest upstream release https://github.com/containers/composefs/releases/tag/v1.0.6 Related: RHEL-60292 - composefs-1.0.5-1.el10 - update to https://github.com/containers/composefs/releases/tag/v1.0.5 - Related: RHEL-34195 - Update to 1.0.4 - Update to the latest git snapshot - Add patch to fix build errors - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - convert license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - use proper macros in spec file and simplify - Related: RHEL-111917 - update to https://github.com/containers/conmon/releases/tag/v2.2.1 - enable RELRO - Related: RHEL-122178 - update to https://github.com/containers/conmon/releases/tag/v2.2.0 - Related: RHEL-122178 - update to https://github.com/containers/conmon/releases/tag/v2.1.13 - Resolves: RHEL-80818 - Fix spec file, remove crio - Related: RHEL-58990 - nfct: helper: Extend error message for EBUSY - Backport fixes from upstream - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to version 1.4.8 + fixes from upstream - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Backport upstream patch to fix GCC 14 compatibility issues - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Switch License tags to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Switch License tags to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Switch License tags to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Switch License tags to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - update to https://github.com/containers/container-selinux/releases/tag/v2.246.0 - Resolves: RHEL-143694 - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0 - Related: RHEL-122178 - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0 - Resolves: RHEL-111947 - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0 - Related: RHEL-111917 - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0 - Resolves: RHEL-111947 - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0 - Related: RHEL-80817 - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0 - Related: RHEL-80817 - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0 - Related: RHEL-80817 - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0 - Resolves: RHEL-85671 - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0 - Resolves: RHEL-80476 - update to 2.248.0 - Resolves: RHEL-168686 - update to https://github.com/containers/container-selinux/releases/tag/v2.247.0 - Resolves: RHEL-135340 - update to https://github.com/containers/container-selinux/releases/tag/v2.246.0 - Resolves: RHEL-143694 - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0 - Related: RHEL-122178 - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0 - Resolves: RHEL-111947 - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0 - Related: RHEL-111917 - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0 - Resolves: RHEL-111947 - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0 - Related: RHEL-80817 - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0 - Related: RHEL-80817 - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0 - Related: RHEL-80817 - Fix typo in the Summary - Resolves: RHEL-122178 - amend dependencies for RHEL10 - Resolves: RHEL-92028 - build for RHEL10 - Resolves: RHEL-92028 - rebuild with updated dependencies: [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0, aardvark-dns and netavark 1.9.0 - Related: Jira:RHEL-2112 - Convert to unified source - container-libs - Related: RHEL-111917 - do not allow the shortname to contain registry - Resolves: RHEL-147179 - update shortnames and vendored components for RHEL-10.2 - Resolves: RHEL-146877 - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images - Related: RHEL-111917 - update vendored components for 10.1 - Related: RHEL-80817 - remove the ugly installation hack in tests - Related: RHEL-80817 - update shortnames from Pyxis - Related: RHEL-80817 - update vendored components - Related: RHEL-80817 - fetch TMT podman revdep tests from podman dist-git - needs at least podman 5.4.0-7.el10 - Related: RHEL-80817 - update vendored components - Related: RHEL-58990 - Convert to unified source - container-libs - Related: RHEL-111917 - do not allow the shortname to contain registry - Resolves: RHEL-147179 - update shortnames and vendored components for RHEL-10.2 - Resolves: RHEL-146877 - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images - Related: RHEL-111917 - update vendored components for 10.1 - Related: RHEL-80817 - remove the ugly installation hack in tests - Related: RHEL-80817 - update shortnames from Pyxis - Related: RHEL-80817 - update vendored components - Related: RHEL-80817 - fetch TMT podman revdep tests from podman dist-git - needs at least podman 5.4.0-7.el10 - Related: RHEL-80817 - update vendored components - Related: RHEL-58990 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Correct the SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - new version - New upstream release - Update to latest upstream - new version - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild for correct jira, resolves RHEL-52233 - New upstream release - Bump release for June 2024 mass rebuild - new version - New upstream release - Update to latest upstream - new version - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild for correct jira, resolves RHEL-52233 - New upstream release - Bump release for June 2024 mass rebuild - new version - New upstream release - Update to latest upstream - new version - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild for correct jira, resolves RHEL-52233 - New upstream release - Bump release for June 2024 mass rebuild - Resolves: RHEL-122945 - New upstream release (RHEL-122945) - Resolves: RHEL-96073 - exec: Add support for env STATE_DIRECTORY - init: Use LogsDirectory in systemd unit file - Resolves: RHEL-84612 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472) - Resolves: RHEL-65701 - New upstream release (RHEL-65701) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Resolves: RHEL-163802 - Resolves: RHEL-163823 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) - Resolves: RHEL-122945 - New upstream release (RHEL-122945) - Resolves: RHEL-96073 - exec: Add support for env STATE_DIRECTORY - init: Use LogsDirectory in systemd unit file - Resolves: RHEL-84612 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472) - Resolves: RHEL-65701 - New upstream release (RHEL-65701) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Resolves: RHEL-251541 - totempg: Replace assert with check in deliver_fn (fixes CVE-2026-81665) - Resolves: RHEL-163802 - Resolves: RHEL-163823 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) - Resolves: RHEL-122945 - New upstream release (RHEL-122945) - Resolves: RHEL-96073 - exec: Add support for env STATE_DIRECTORY - init: Use LogsDirectory in systemd unit file - Resolves: RHEL-84612 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472) - Resolves: RHEL-65701 - New upstream release (RHEL-65701) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Debrand for AlmaLinux - Rebase to upstream crash 9.0.1 - Rebase to upstream crash 62486400d35 - Rebase to upstream crash 2c69f93e59c - Rebase to upstream crash 7e8a2796580 - Rebase to upstream crash 9.0.0 - Rebase to upstream crash 8.0.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to upstream crash 8.0.5 f615f8fab7bf3 - Rebase to upstream crash 8.0.5 ce4ddc742fbdd - rebase to latest upstream e03ff7341a - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now" - add gating.yaml - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - trace: Support module memory layout change on Linux 6.4 - Bump release for June 2024 mass rebuild - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now" - add gating.yaml - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a file descriptor and a memory leak in an error path of cr_detect_compression() (RHEL-45645) - Bump release for June 2024 mass rebuild - 1.1.2 bump (RHEL-38831) - 1.1.1 bump (RHEL-38831) - Package Python examples - Update to 1.0.4 (RHEL-38831) - Extend the --compatibility flag to cover other defaults - mergerepo_c and modifyrepo_c now make "pretty" indented xml - Fix building due to bash-completion repackaging - Update to 1.0.3 - Set compression level 10 for zstd and zck - Introduce new --no-pretty option to reduce metadata size - Use gzip compression by default when --compatibility is specified - Default changelog limit restored for --compatibility - Use epoch-friendly sub-package interdependencies - Enable sqlite shared cache on connection level - Fix const-correctness with libxml2-2.12.0 - Allow specifying zck compression only - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Restore compatiblity with libxml2-2.12.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a file descriptor and a memory leak in an error path of cr_detect_compression() (RHEL-45645) - Bump release for June 2024 mass rebuild - 1.1.2 bump (RHEL-38831) - 1.1.1 bump (RHEL-38831) - Package Python examples - Update to 1.0.4 (RHEL-38831) - Extend the --compatibility flag to cover other defaults - mergerepo_c and modifyrepo_c now make "pretty" indented xml - Fix building due to bash-completion repackaging - Update to 1.0.3 - Set compression level 10 for zstd and zck - Introduce new --no-pretty option to reduce metadata size - Use gzip compression by default when --compatibility is specified - Default changelog limit restored for --compatibility - Use epoch-friendly sub-package interdependencies - Enable sqlite shared cache on connection level - Fix const-correctness with libxml2-2.12.0 - Allow specifying zck compression only - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Restore compatiblity with libxml2-2.12.0 - Update to 4.2 - Update to 4.1 - Fix VDSO compile error on s390x - Adapt patches to patches merged upstream - Fix running on aarch64 - Switch network locking backend default to nftables - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix test setup - Add riscv64 to ExclusiveArch - Handle rseq in generic compel code (checkpoint-restore/criu#3097) - Update to 4.2 - Update to 4.1 - Fix VDSO compile error on s390x - Adapt patches to patches merged upstream - Fix running on aarch64 - Switch network locking backend default to nftables - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 4.2 - Update to 4.1 - Fix VDSO compile error on s390x - Adapt patches to patches merged upstream - Fix running on aarch64 - Switch network locking backend default to nftables - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix test setup - Add riscv64 to ExclusiveArch - Handle rseq in generic compel code (checkpoint-restore/criu#3097) - Update to 4.2 - Update to 4.1 - Fix VDSO compile error on s390x - Adapt patches to patches merged upstream - Fix running on aarch64 - Switch network locking backend default to nftables - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 4.2 - Update to 4.1 - Fix VDSO compile error on s390x - Adapt patches to patches merged upstream - Fix running on aarch64 - Switch network locking backend default to nftables - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix test setup - Add riscv64 to ExclusiveArch - Handle rseq in generic compel code (checkpoint-restore/criu#3097) - Update to 4.2 - Update to 4.1 - Fix VDSO compile error on s390x - Adapt patches to patches merged upstream - Fix running on aarch64 - Switch network locking backend default to nftables - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - enable krun handler for crun on RHEL 10 - Resolves: RHEL-161090 - update to https://github.com/containers/crun/releases/tag/1.27 - fixes CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the `--user` option [rhel-10.2] - Resolves: RHEL-161418 - update to https://github.com/containers/crun/releases/tag/1.26 - Resolves: RHEL-114419 - update to https://github.com/containers/crun/releases/tag/1.25.1 - Resolves: RHEL-116095 - update to https://github.com/containers/crun/releases/tag/1.24 - Related: RHEL-111917 - update to https://github.com/containers/crun/releases/tag/1.23.1 - Related: RHEL-80817 - update to https://github.com/containers/crun/releases/tag/1.23 - Related: RHEL-80817 - update to https://github.com/containers/crun/releases/tag/1.22 - Related: RHEL-80817 - update to https://github.com/containers/crun/releases/tag/1.21 - Related: RHEL-80817 - fix gating.yaml - Related: RHEL-80817 - port spec from upstream tarball: replace yajl with json-c-devel, add embedded blake3 support - Resolves: RHEL-257422 - update to https://github.com/containers/crun/releases/tag/1.30.1 - Resolves: RHEL-257422 - enable krun handler for crun on RHEL 10 - Resolves: RHEL-161090 - update to https://github.com/containers/crun/releases/tag/1.27 - fixes CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the `--user` option [rhel-10.2] - Resolves: RHEL-161418 - update to https://github.com/containers/crun/releases/tag/1.26 - Resolves: RHEL-114419 - update to https://github.com/containers/crun/releases/tag/1.25.1 - Resolves: RHEL-116095 - update to https://github.com/containers/crun/releases/tag/1.24 - Related: RHEL-111917 - update to https://github.com/containers/crun/releases/tag/1.23.1 - Related: RHEL-80817 - update to https://github.com/containers/crun/releases/tag/1.23 - Related: RHEL-80817 - update to https://github.com/containers/crun/releases/tag/1.22 - Related: RHEL-80817 - enable krun handler for crun on RHEL 10 - Resolves: RHEL-161090 - update to https://github.com/containers/crun/releases/tag/1.27 - fixes CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the `--user` option [rhel-10.2] - Resolves: RHEL-161418 - update to https://github.com/containers/crun/releases/tag/1.26 - Resolves: RHEL-114419 - update to https://github.com/containers/crun/releases/tag/1.25.1 - Resolves: RHEL-116095 - update to https://github.com/containers/crun/releases/tag/1.24 - Related: RHEL-111917 - update to https://github.com/containers/crun/releases/tag/1.23.1 - Related: RHEL-80817 - update to https://github.com/containers/crun/releases/tag/1.23 - Related: RHEL-80817 - update to https://github.com/containers/crun/releases/tag/1.22 - Related: RHEL-80817 - update to https://github.com/containers/crun/releases/tag/1.21 - Related: RHEL-80817 - fix gating.yaml - Related: RHEL-80817 - port spec from upstream tarball: replace yajl with json-c-devel, add embedded blake3 support - Resolves: RHEL-257422 - update to https://github.com/containers/crun/releases/tag/1.30.1 - Resolves: RHEL-257422 - enable krun handler for crun on RHEL 10 - Resolves: RHEL-161090 - update to https://github.com/containers/crun/releases/tag/1.27 - fixes CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the `--user` option [rhel-10.2] - Resolves: RHEL-161418 - update to https://github.com/containers/crun/releases/tag/1.26 - Resolves: RHEL-114419 - update to https://github.com/containers/crun/releases/tag/1.25.1 - Resolves: RHEL-116095 - update to https://github.com/containers/crun/releases/tag/1.24 - Related: RHEL-111917 - update to https://github.com/containers/crun/releases/tag/1.23.1 - Related: RHEL-80817 - update to https://github.com/containers/crun/releases/tag/1.23 - Related: RHEL-80817 - update to https://github.com/containers/crun/releases/tag/1.22 - Related: RHEL-80817 - Update cscope to 15.9-26 from Fedora (RHEL-65464) - Fix signal handling at exit - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors - Minor edits in the rpm scripts - Make xemacs a bcond - Bump release for October 2024 mass rebuild (RHEL-64018) - Bump release for June 2024 mass rebuild - Add OSCI harness - Add self-tests - Use proper SPDX license identifiers (RHEL-30639) - Initial import from Fedora 40 - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s) - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-177945 CVE-2026-34980 cups: control character injection in option values - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - RHEL-87180 RFE: Synchronize server defaults with clients [rhel-10] - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents - RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default - Bump release for June 2024 mass rebuild - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes - fix several issues reported by openscanhub - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2240317 - cups-browsed-2.0.0 is available - 2150035 - [abrt] cups-filters: __strlen_avx2(): cups-browsed killed by SIGSEGV - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s) - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-177945 CVE-2026-34980 cups: control character injection in option values - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s) - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-177945 CVE-2026-34980 cups: control character injection in option values - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - RHEL-93944 RFE: Add Allow list for FoomaticRIPCommandLine PPD values [rhel-10] - RHEL-83060 lpinfo -m doesn't show textonly driver - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-49766 Fix missing Epoch in conflicts reported by rpminspect - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - make driverless subpackage require avahi and ipptool - they don't work without them - introduce cups-filters-driverless to strip avahi dependency for filters - use exact foomatic-rip filter to comply with LSB - RHEL-93944 RFE: Add Allow list for FoomaticRIPCommandLine PPD values [rhel-10] - RHEL-83060 lpinfo -m doesn't show textonly driver - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-49766 Fix missing Epoch in conflicts reported by rpminspect - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - make driverless subpackage require avahi and ipptool - they don't work without them - introduce cups-filters-driverless to strip avahi dependency for filters - use exact foomatic-rip filter to comply with LSB - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s) - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-177945 CVE-2026-34980 cups: control character injection in option values - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s) - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-177945 CVE-2026-34980 cups: control character injection in option values - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s) - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-177945 CVE-2026-34980 cups: control character injection in option values - RHEL-154276 endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122293 [image-mode] Missing /var/log/cups - RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - provide a way how to opt-out from system crypto policy if needed - RHEL-68415 Inability to disable weak ciphers in CUPS configuration - RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails - bump release for rebuild to re-run tests. - Related: RHEL-99217 - Rebase to upstream v82 - Resolves: RHEL-99217 - Fix listing of region capabilities (Jeff Moyer) - Remove orphaned patch file (Jeff Moyer) - Resolves: RHEL-80436 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Declare explicit version dependencies for daxctl, cxl-cli and cxl-libs. - Related: RHEL-33029 - Update to upstream v80. - Resolves: RHEL-33029 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Create directory structure under /var using tmpfiles.d - Remove sscg option --package from cyrus-imapd-init.service - Update location of fmf plans - update the default cyrus.conf to enable idled Resolves: RHEL-61130 - Bump release for October 2024 mass rebuild: - Bump release for Aug 2024 perl mass rebuild - Bump release for June 2024 mass rebuild - Update of fmf plans and gating for c10s - Cassandane: do not depend on imaptest, clean up BuildRequires - Re-enable LTO - Fix CVE-2024-34055 - Fix wrong symlinks to imtest utilities - Convert to %autorelease and %autochangelog - Create directory structure under /var using tmpfiles.d - Remove sscg option --package from cyrus-imapd-init.service - Update location of fmf plans - update the default cyrus.conf to enable idled Resolves: RHEL-61130 - Bump release for October 2024 mass rebuild: - Bump release for Aug 2024 perl mass rebuild - Bump release for June 2024 mass rebuild - Update of fmf plans and gating for c10s - Cassandane: do not depend on imaptest, clean up BuildRequires - Re-enable LTO - Fix CVE-2024-34055 - Fix wrong symlinks to imtest utilities - Convert to %autorelease and %autochangelog - Create directory structure under /var using tmpfiles.d - Remove sscg option --package from cyrus-imapd-init.service - Update location of fmf plans - update the default cyrus.conf to enable idled Resolves: RHEL-61130 - Bump release for October 2024 mass rebuild: - Bump release for Aug 2024 perl mass rebuild - Bump release for June 2024 mass rebuild - Update of fmf plans and gating for c10s - Cassandane: do not depend on imaptest, clean up BuildRequires - Re-enable LTO - Fix CVE-2024-34055 - Fix wrong symlinks to imtest utilities - Convert to %autorelease and %autochangelog - Add missing definition for gdbm_db_file - Remove debug log spam in digestmd5 plugin - Drop the baseos-ci gating test. It is deprecated - Switch gating to depend on idm-ci.brew-build.tier1.functional - Bump release for October 2024 mass rebuild: - Added gating.yaml for cyrus-sasl - Bump release for June 2024 mass rebuild - Update license to BSD-Attribution-HPND-disclaimer - Remove BerkeleyDB converting tool. It was intended to be removed in RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s Resolves: RHEL-43136 - Fix some issues uncovered by a static analyzer - Remove the sanity-ldapdb-plugin test - Add missing definition for gdbm_db_file - Remove debug log spam in digestmd5 plugin - Drop the baseos-ci gating test. It is deprecated - Switch gating to depend on idm-ci.brew-build.tier1.functional - Bump release for October 2024 mass rebuild: - Added gating.yaml for cyrus-sasl - Bump release for June 2024 mass rebuild - Update license to BSD-Attribution-HPND-disclaimer - Remove BerkeleyDB converting tool. It was intended to be removed in RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s Resolves: RHEL-43136 - Add missing definition for gdbm_db_file - Remove debug log spam in digestmd5 plugin - Drop the baseos-ci gating test. It is deprecated - Switch gating to depend on idm-ci.brew-build.tier1.functional - Bump release for October 2024 mass rebuild: - Added gating.yaml for cyrus-sasl - Bump release for June 2024 mass rebuild - Update license to BSD-Attribution-HPND-disclaimer - Remove BerkeleyDB converting tool. It was intended to be removed in RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s Resolves: RHEL-43136 - Fix some issues uncovered by a static analyzer - Remove the sanity-ldapdb-plugin test - Add missing definition for gdbm_db_file - Remove debug log spam in digestmd5 plugin - Drop the baseos-ci gating test. It is deprecated - Switch gating to depend on idm-ci.brew-build.tier1.functional - Bump release for October 2024 mass rebuild: - Added gating.yaml for cyrus-sasl - Bump release for June 2024 mass rebuild - Update license to BSD-Attribution-HPND-disclaimer - Remove BerkeleyDB converting tool. It was intended to be removed in RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s Resolves: RHEL-43136 - Add missing definition for gdbm_db_file - Remove debug log spam in digestmd5 plugin - Drop the baseos-ci gating test. It is deprecated - Switch gating to depend on idm-ci.brew-build.tier1.functional - Bump release for October 2024 mass rebuild: - Added gating.yaml for cyrus-sasl - Bump release for June 2024 mass rebuild - Update license to BSD-Attribution-HPND-disclaimer - Remove BerkeleyDB converting tool. It was intended to be removed in RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s Resolves: RHEL-43136 - Fix some issues uncovered by a static analyzer - Remove the sanity-ldapdb-plugin test - Add missing definition for gdbm_db_file - Remove debug log spam in digestmd5 plugin - Drop the baseos-ci gating test. It is deprecated - Switch gating to depend on idm-ci.brew-build.tier1.functional - Bump release for October 2024 mass rebuild: - Added gating.yaml for cyrus-sasl - Bump release for June 2024 mass rebuild - Update license to BSD-Attribution-HPND-disclaimer - Remove BerkeleyDB converting tool. It was intended to be removed in RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s Resolves: RHEL-43136 - Add missing definition for gdbm_db_file - Remove debug log spam in digestmd5 plugin - Drop the baseos-ci gating test. It is deprecated - Switch gating to depend on idm-ci.brew-build.tier1.functional - Bump release for October 2024 mass rebuild: - Added gating.yaml for cyrus-sasl - Bump release for June 2024 mass rebuild - Update license to BSD-Attribution-HPND-disclaimer - Remove BerkeleyDB converting tool. It was intended to be removed in RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s Resolves: RHEL-43136 - Fix some issues uncovered by a static analyzer - Remove the sanity-ldapdb-plugin test - Add missing definition for gdbm_db_file - Remove debug log spam in digestmd5 plugin - Drop the baseos-ci gating test. It is deprecated - Switch gating to depend on idm-ci.brew-build.tier1.functional - Bump release for October 2024 mass rebuild: - Added gating.yaml for cyrus-sasl - Bump release for June 2024 mass rebuild - Update license to BSD-Attribution-HPND-disclaimer - Remove BerkeleyDB converting tool. It was intended to be removed in RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s Resolves: RHEL-43136 - Add missing definition for gdbm_db_file - Remove debug log spam in digestmd5 plugin - Drop the baseos-ci gating test. It is deprecated - Switch gating to depend on idm-ci.brew-build.tier1.functional - Bump release for October 2024 mass rebuild: - Added gating.yaml for cyrus-sasl - Bump release for June 2024 mass rebuild - Update license to BSD-Attribution-HPND-disclaimer - Remove BerkeleyDB converting tool. It was intended to be removed in RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s Resolves: RHEL-43136 - Fix some issues uncovered by a static analyzer - Remove the sanity-ldapdb-plugin test - Add missing definition for gdbm_db_file - Remove debug log spam in digestmd5 plugin - Drop the baseos-ci gating test. It is deprecated - Switch gating to depend on idm-ci.brew-build.tier1.functional - Bump release for October 2024 mass rebuild: - Added gating.yaml for cyrus-sasl - Bump release for June 2024 mass rebuild - Update license to BSD-Attribution-HPND-disclaimer - Remove BerkeleyDB converting tool. It was intended to be removed in RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s Resolves: RHEL-43136 - bump release for rebuild to re-run tests. - Related: RHEL-99217 - Rebase to upstream v82 - Resolves: RHEL-99217 - Fix listing of region capabilities (Jeff Moyer) - Remove orphaned patch file (Jeff Moyer) - Resolves: RHEL-80436 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Declare explicit version dependencies for daxctl, cxl-cli and cxl-libs. - Related: RHEL-33029 - Update to upstream v80. - Resolves: RHEL-33029 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.14.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.14.8 - Update to 1.14.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.14.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.14.8 - Update to 1.14.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.14.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.14.8 - Update to 1.14.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Describe DBDIR argument in man page - Resolves: RHEL-83392 - Backport patch for permissions restore - Indicate bundle of GVDB - Resolves: RHEL-71949 - Do not use system profile for tests - Resolves: RHEL-65653 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.0.1 - Update to 45.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for jasper 4.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - move to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Provide an ability to change ISO label (RHEL-77181). - Update to the latest version (RHEL-55716, RHEL-61716, RHEL-68669). - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Add 0001-Add-basic-find-debuginfo-script-tests.patch - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch - NVR bump and rebuild for RHEL-10.1 - Add debugedit-5.1-binutils-tools-override.patch - Add 0001-find-debuginfo-Make-return-from-do_file-explicit.patch - Add 0001-find-debuginfo-Fix-skip_mini-.gnu_debugdata-handling.patch - Add 0001-find-debuginfo-Check-files-are-writable-before-modif.patch - New upstream 5.1 release - Drop all local patches - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX. - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX. - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX. - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update Delve to version 1.26.1 - Rebuild with latest Go - Update Delve to 1.25.2 - Update CI support - Rebuild without changes - Update Delve to 1.24.1 - plans/ci.fmf: Update repo - Bump release for October 2024 mass rebuild: - Remove macro and tidy up - Enable ppc64le - Bump - Update Delve to 1.26.1 - Update Delve to 1.25.2 - Update CI support - Rebuild without changes - Update Delve to 1.24.1 - plans/ci.fmf: Update repo - Bump release for October 2024 mass rebuild: - Remove macro and tidy up - Enable ppc64le - Update accepted desktop IDs Resolves: RHEL-107113 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Build for the SPDX license format change - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - update to 1.3-20240101 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 1.3-20231002 - convert license tag to SPDX - package pkgconfig file - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 1.66 (#2260805) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add x86_64_v2 to _BASEARCH_MAP - Add link to AlmaLinux bugtracker - bootc: unlock only if /usr is read-only (RHEL-145780) - autoremove: when a dangling protected dependency is found produce a warning and skip it (RHEL-128445) - Ignore untrusted signatures if there is trusted one (RHEL-112730) - automatic: Expand email_to in command_email emitter to individual arguments (RHEL-94331) - Fix detecting releasever_minor in dnf-automatic (RHEL-106141) - Add deprecation warning to modularity commands/docs (RHEL-89940) - Obsolete RHEL-9-only multisig DNF plugin (RHEL-102336) - Mark transient transactions in DNF history (RHEL-84515) - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501) - spec: Provide dnf4 by python3-dnf (RHEL-82311) - Rebase to 1.7.5 - Resolves: RHEL-139870 - Rebuild because of infrastructure problems - Resolves: RHEL-92412 - Resolves: RHEL-88534 - Resolves: RHEL-81709 - Rebase to 1.7.3 - Resolves: RHEL-92412 - Resolves: RHEL-88534 - Resolves: RHEL-81709 - Rebase to 1.7.2 - Resolves: RHEL-80304 - Rebase to 1.7.1 - Resolves: RHEL-79172 - Rebase to 1.7.0 - Resolves: RHEL-79172 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Release 1.2.0 - Release 1.1.2 - Initial build - Rebase to 1.7.5 - Resolves: RHEL-139870 - Rebuild because of infrastructure problems - Resolves: RHEL-92412 - Resolves: RHEL-88534 - Resolves: RHEL-81709 - Rebase to 1.7.3 - Resolves: RHEL-92412 - Resolves: RHEL-88534 - Resolves: RHEL-81709 - Rebase to 1.7.2 - Resolves: RHEL-80304 - Rebase to 1.7.1 - Resolves: RHEL-79172 - Rebase to 1.7.0 - Resolves: RHEL-79172 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Release 1.2.0 - Release 1.1.2 - Initial build - Rebase to 1.7.5 - Resolves: RHEL-139870 - Rebuild because of infrastructure problems - Resolves: RHEL-92412 - Resolves: RHEL-88534 - Resolves: RHEL-81709 - Rebase to 1.7.3 - Resolves: RHEL-92412 - Resolves: RHEL-88534 - Resolves: RHEL-81709 - Rebase to 1.7.2 - Resolves: RHEL-80304 - Rebase to 1.7.1 - Resolves: RHEL-79172 - Rebase to 1.7.0 - Resolves: RHEL-79172 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Release 1.2.0 - Release 1.1.2 - Initial build - Rebase to 1.7.5 - Resolves: RHEL-139870 - Rebuild because of infrastructure problems - Resolves: RHEL-92412 - Resolves: RHEL-88534 - Resolves: RHEL-81709 - Rebase to 1.7.3 - Resolves: RHEL-92412 - Resolves: RHEL-88534 - Resolves: RHEL-81709 - Rebase to 1.7.2 - Resolves: RHEL-80304 - Rebase to 1.7.1 - Resolves: RHEL-79172 - Rebase to 1.7.0 - Resolves: RHEL-79172 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Release 1.2.0 - Release 1.1.2 - Initial build - Rebase to 1.7.5 - Resolves: RHEL-139870 - Rebuild because of infrastructure problems - Resolves: RHEL-92412 - Resolves: RHEL-88534 - Resolves: RHEL-81709 - Rebase to 1.7.3 - Resolves: RHEL-92412 - Resolves: RHEL-88534 - Resolves: RHEL-81709 - Rebase to 1.7.2 - Resolves: RHEL-80304 - Rebase to 1.7.1 - Resolves: RHEL-79172 - Rebase to 1.7.0 - Resolves: RHEL-79172 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Release 1.2.0 - Release 1.1.2 - Initial build - Update DNSSEC trust anchors with 2024 key (38696) (RHEL-249229) - Prevent overflow in extract_name function (CVE-2026-2291) - Prevent DoS in DNSSEC validation (CVE-2026-4890) - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891) - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892) - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893) - Prevent out-of-bounds read in extract_addresses (CVE-2026-5172) - Prevent heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291) - Added installation of tmpfiles.d config Resolves: RHEL-122843 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Prevent overflow in extract_name function (CVE-2026-2291) - Prevent DoS in DNSSEC validation (CVE-2026-4890) - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891) - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892) - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893) - Prevent out-of-bounds read in extract_addresses (CVE-2026-5172) - Prevent heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291) - Added installation of tmpfiles.d config Resolves: RHEL-122843 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update SPDX in license tag to use uppercase conjunction - Update DNSSEC trust anchors with 2024 key (38696) (RHEL-249229) - Prevent overflow in extract_name function (CVE-2026-2291) - Prevent DoS in DNSSEC validation (CVE-2026-4890) - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891) - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892) - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893) - Prevent out-of-bounds read in extract_addresses (CVE-2026-5172) - Prevent heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291) - Added installation of tmpfiles.d config Resolves: RHEL-122843 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Prevent overflow in extract_name function (CVE-2026-2291) - Prevent DoS in DNSSEC validation (CVE-2026-4890) - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891) - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892) - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893) - Prevent out-of-bounds read in extract_addresses (CVE-2026-5172) - Prevent heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291) - Added installation of tmpfiles.d config Resolves: RHEL-122843 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update SPDX in license tag to use uppercase conjunction - Rebuild for Konflux (Resolves: RHEL-84822) - Rebuild for Konflux - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update license tag to the SPDX format (LicenseRef-docbook-dtds) - Resolves: RHEL-45839 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use %patch -P N instead of deprecated %patchN - Use RPM macros in the spec file for paths - Add comments, improve the structure - Unify paths in patch files - Simplify install script - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuild for Konflux (Resolves: RHEL-84822) - Rebuild for Konflux (Resolves: RHEL-84822) - Rebuild for Konflux (Resolves: RHEL-84822) - Rebuild for Konflux - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update license tag to the SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add missing SPDX licenses to license tag - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1975708712 - Related: RHEL-37894 - Drop unused tools directory - Limit Java dependency to extensions subpackage - Remove binary JAR files and replace them with available dependencies - Related: RHEL-37894 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Build for the SPDX license format change - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET 10 RC 1 - Resolves: RHEL-114571 - Disable bootstrap - Related: RHEL-98678 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Disable bootstrap - Related: RHEL-114571 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125749 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121558 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130939 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138641 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144975 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235482 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 - Reduce time to detect hanging builds - Resolves: RHEL-191640 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 - Adjust build limits - Resolves: RHEL-169518 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163387 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152955 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100594 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112262 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106721 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116869 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125739 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138653 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 - Reduce time to detect hanging builds - Resolves: RHEL-191650 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163419 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152933 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144967 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - fix CVE-2026-42006: fix imap_parser list_count_limit to actually work (RHEL-188477) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - fix building with latest openssl (RHEL-117460) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953) - fix sysusers config file name (RHEL-77323) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55218) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55205) - fix crash when user has sieve script that includes two missing scripts (RHEL-52541) - fix building with noengine openssl - fix CVE-2026-33605: ManageSieve: denial of service via lone CR character causing protocol deadlock (RHEL-251984) - fix CVE-2026-42007: fix use-after-free and info leak in sieve editheader extension (RHEL-251945) - fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252058) - fix CVE-2026-42391: fix excessive memory growth with pre-login ID command (RHEL-252072) - fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251900) - fix CVE-2026-27852: limit parsed message data to prevent memory exhaustion (RHEL-251564) - fix CVE-2026-33263: submission-login epoll panic at mail_max_userip_connections limit (RHEL-251917) - fix CVE-2026-42006: fix imap_parser list_count_limit to actually work (RHEL-188477) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - fix building with latest openssl (RHEL-117460) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953) - fix sysusers config file name (RHEL-77323) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55218) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55205) - fix crash when user has sieve script that includes two missing scripts (RHEL-52541) - fix building with noengine openssl - Bump release for June 2024 mass rebuild - set min uid to 1000 - fix CVE-2026-42006: fix imap_parser list_count_limit to actually work (RHEL-188477) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - fix building with latest openssl (RHEL-117460) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953) - fix sysusers config file name (RHEL-77323) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55218) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55205) - fix crash when user has sieve script that includes two missing scripts (RHEL-52541) - fix building with noengine openssl - fix CVE-2026-33605: ManageSieve: denial of service via lone CR character causing protocol deadlock (RHEL-251984) - fix CVE-2026-42007: fix use-after-free and info leak in sieve editheader extension (RHEL-251945) - fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252058) - fix CVE-2026-42391: fix excessive memory growth with pre-login ID command (RHEL-252072) - fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251900) - fix CVE-2026-27852: limit parsed message data to prevent memory exhaustion (RHEL-251564) - fix CVE-2026-33263: submission-login epoll panic at mail_max_userip_connections limit (RHEL-251917) - fix CVE-2026-42006: fix imap_parser list_count_limit to actually work (RHEL-188477) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - fix building with latest openssl (RHEL-117460) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953) - fix sysusers config file name (RHEL-77323) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55218) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55205) - fix crash when user has sieve script that includes two missing scripts (RHEL-52541) - fix building with noengine openssl - Bump release for June 2024 mass rebuild - set min uid to 1000 - fix CVE-2026-42006: fix imap_parser list_count_limit to actually work (RHEL-188477) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - fix building with latest openssl (RHEL-117460) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953) - fix sysusers config file name (RHEL-77323) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55218) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55205) - fix crash when user has sieve script that includes two missing scripts (RHEL-52541) - fix building with noengine openssl - fix CVE-2026-33605: ManageSieve: denial of service via lone CR character causing protocol deadlock (RHEL-251984) - fix CVE-2026-42007: fix use-after-free and info leak in sieve editheader extension (RHEL-251945) - fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252058) - fix CVE-2026-42391: fix excessive memory growth with pre-login ID command (RHEL-252072) - fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251900) - fix CVE-2026-27852: limit parsed message data to prevent memory exhaustion (RHEL-251564) - fix CVE-2026-33263: submission-login epoll panic at mail_max_userip_connections limit (RHEL-251917) - fix CVE-2026-42006: fix imap_parser list_count_limit to actually work (RHEL-188477) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - fix building with latest openssl (RHEL-117460) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953) - fix sysusers config file name (RHEL-77323) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55218) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55205) - fix crash when user has sieve script that includes two missing scripts (RHEL-52541) - fix building with noengine openssl - Bump release for June 2024 mass rebuild - set min uid to 1000 - fix CVE-2026-42006: fix imap_parser list_count_limit to actually work (RHEL-188477) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - fix building with latest openssl (RHEL-117460) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953) - fix sysusers config file name (RHEL-77323) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55218) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55205) - fix crash when user has sieve script that includes two missing scripts (RHEL-52541) - fix building with noengine openssl - fix CVE-2026-33605: ManageSieve: denial of service via lone CR character causing protocol deadlock (RHEL-251984) - fix CVE-2026-42007: fix use-after-free and info leak in sieve editheader extension (RHEL-251945) - fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252058) - fix CVE-2026-42391: fix excessive memory growth with pre-login ID command (RHEL-252072) - fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251900) - fix CVE-2026-27852: limit parsed message data to prevent memory exhaustion (RHEL-251564) - fix CVE-2026-33263: submission-login epoll panic at mail_max_userip_connections limit (RHEL-251917) - fix CVE-2026-42006: fix imap_parser list_count_limit to actually work (RHEL-188477) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - update release for rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665) - fix building with latest openssl (RHEL-117460) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953) - fix sysusers config file name (RHEL-77323) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55218) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55205) - fix crash when user has sieve script that includes two missing scripts (RHEL-52541) - fix building with noengine openssl - Bump release for June 2024 mass rebuild - set min uid to 1000 - Rebase to 25.11 (RHEL-132460) - Update License to SPDX (RHEL-144623) - Rebase to 24.11.3 (RHEL-121227) - Enable net/mlx5 driver for ARM (RHEL-109887) - Avoid requiring NET_ADMIN with mlx5 (RHEL-93856) - Rebase to 24.11.2 (RHEL-96849) - Enable net/ena and net/mana drivers (RHEL-73690) - Rebase to 24.11.1 (RHEL-71284) - Backport fixes for CVE-2024-11614 (RHEL-68662) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 25.11 (RHEL-132460) - Update License to SPDX (RHEL-144623) - Rebase to 24.11.3 (RHEL-121227) - Enable net/mlx5 driver for ARM (RHEL-109887) - Avoid requiring NET_ADMIN with mlx5 (RHEL-93856) - Rebase to 24.11.2 (RHEL-96849) - Enable net/ena and net/mana drivers (RHEL-73690) - Rebase to 24.11.1 (RHEL-71284) - Backport fixes for CVE-2024-11614 (RHEL-68662) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 25.11 (RHEL-132460) - Update License to SPDX (RHEL-144623) - Rebase to 24.11.3 (RHEL-121227) - Enable net/mlx5 driver for ARM (RHEL-109887) - Avoid requiring NET_ADMIN with mlx5 (RHEL-93856) - Rebase to 24.11.2 (RHEL-96849) - Enable net/ena and net/mana drivers (RHEL-73690) - Rebase to 24.11.1 (RHEL-71284) - Backport fixes for CVE-2024-11614 (RHEL-68662) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 25.11 (RHEL-132460) - Update License to SPDX (RHEL-144623) - Rebase to 24.11.3 (RHEL-121227) - Enable net/mlx5 driver for ARM (RHEL-109887) - Avoid requiring NET_ADMIN with mlx5 (RHEL-93856) - Rebase to 24.11.2 (RHEL-96849) - Enable net/ena and net/mana drivers (RHEL-73690) - Rebase to 24.11.1 (RHEL-71284) - Backport fixes for CVE-2024-11614 (RHEL-68662) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix(systemd-udevd): handle root=gpt-auto for systemd-v258 - fix(systemd-repart): allow partition format - feat(install.d): do not remove UKIs on remove) - fix(dracut.install): remove extraneous quotes in dracut arguments - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571 - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells - test: fixup NFS test.sh Resolves: RHEL-108215,RHEL-97473 - fix: improve hostonly sloppy mode - fix(dracut.sh): don't pass empty string as dir - feat(systemd): drop unnecessary dependency on libgcrypt - fix(kernel-modules-extra): remove stray before / - Revert "fix(base): do not require chroot inside initramfs" - fix: let check_vol_slaves_all return 1 when checks on all slaves fail - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces - fix(74nvmf): set root=nvmf Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897 - Upgrade to dracut 107 Resolves: RHEL-97473 - fix(rescue): create hmac file for rescue kernel - fix(ossl): copy executables for the test suite - fix(openssl): harden ossl build CFLAGS Related: RHEL-76323 - build: upgrade to dracut 105 - fix(systemd-ask-password): do not half-install systemd-ask-password-wall - fix(pcsc): add libpcsclite_real.so.* - revert: "fix(rescue): make rescue always no-hostonly" - fix(dracut-install): initize fts pointer - feat: add openssl module - build: make erofs the default requirement for squash subpackage Resolves: RHEL-65204,RHEL-68935,RHEL-76323 - Update to dracut 103. - feat(fips-crypto-policies): make c-p follow FIPS mode automatically - fix(fips-crypto-policies): make it depend on fips dracut module Resolves: RHEL-59678,RHEL-65204 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build: rebuild without an obsoleted patch - fix(base): escape arguments in initqueue hook script generation - fix(net-lib): warn on suspicious shell metacharacters in hostname file - fix(systemd-networkd): escape DHCP lease values in dhcpopts generation Related: RHEL-170844 - fix(network-legacy): remove network-legacy completely from the codebase - fix(iscsi): replace `echo` writes with `printf` to prevent variable injection Resolves: RHEL-170844 - fix(systemd-udevd): handle root=gpt-auto for systemd-v258 - fix(systemd-repart): allow partition format - feat(install.d): do not remove UKIs on remove) - fix(dracut.install): remove extraneous quotes in dracut arguments - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571 - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells - test: fixup NFS test.sh Resolves: RHEL-108215,RHEL-97473 - fix: improve hostonly sloppy mode - fix(dracut.sh): don't pass empty string as dir - feat(systemd): drop unnecessary dependency on libgcrypt - fix(kernel-modules-extra): remove stray before / - Revert "fix(base): do not require chroot inside initramfs" - fix: let check_vol_slaves_all return 1 when checks on all slaves fail - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces - fix(74nvmf): set root=nvmf Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897 - Upgrade to dracut 107 Resolves: RHEL-97473 - fix(rescue): create hmac file for rescue kernel - fix(ossl): copy executables for the test suite - fix(openssl): harden ossl build CFLAGS Related: RHEL-76323 - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded" - build: rebuild without an obsoleted patch - fix(base): escape arguments in initqueue hook script generation - fix(net-lib): warn on suspicious shell metacharacters in hostname file - fix(systemd-networkd): escape DHCP lease values in dhcpopts generation Related: RHEL-170844 - fix(network-legacy): remove network-legacy completely from the codebase - fix(iscsi): replace `echo` writes with `printf` to prevent variable injection Resolves: RHEL-170844 - fix(systemd-udevd): handle root=gpt-auto for systemd-v258 - fix(systemd-repart): allow partition format - feat(install.d): do not remove UKIs on remove) - fix(dracut.install): remove extraneous quotes in dracut arguments - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571 - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells - test: fixup NFS test.sh Resolves: RHEL-108215,RHEL-97473 - fix: improve hostonly sloppy mode - fix(dracut.sh): don't pass empty string as dir - feat(systemd): drop unnecessary dependency on libgcrypt - fix(kernel-modules-extra): remove stray before / - Revert "fix(base): do not require chroot inside initramfs" - fix: let check_vol_slaves_all return 1 when checks on all slaves fail - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces - fix(74nvmf): set root=nvmf Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897 - Upgrade to dracut 107 Resolves: RHEL-97473 - fix(rescue): create hmac file for rescue kernel - fix(ossl): copy executables for the test suite - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in splitsep and export_n - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded" - build: rebuild without an obsoleted patch - fix(base): escape arguments in initqueue hook script generation - fix(net-lib): warn on suspicious shell metacharacters in hostname file - fix(systemd-networkd): escape DHCP lease values in dhcpopts generation Related: RHEL-170844 - fix(network-legacy): remove network-legacy completely from the codebase - fix(iscsi): replace `echo` writes with `printf` to prevent variable injection Resolves: RHEL-170844 - fix(systemd-udevd): handle root=gpt-auto for systemd-v258 - fix(systemd-repart): allow partition format - feat(install.d): do not remove UKIs on remove) - fix(dracut.install): remove extraneous quotes in dracut arguments - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571 - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells - test: fixup NFS test.sh Resolves: RHEL-108215,RHEL-97473 - fix: improve hostonly sloppy mode - fix(dracut.sh): don't pass empty string as dir - feat(systemd): drop unnecessary dependency on libgcrypt - fix(kernel-modules-extra): remove stray before / - Revert "fix(base): do not require chroot inside initramfs" - fix: let check_vol_slaves_all return 1 when checks on all slaves fail - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces - fix(74nvmf): set root=nvmf Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897 - Upgrade to dracut 107 Resolves: RHEL-97473 - fix(rescue): create hmac file for rescue kernel - fix(systemd-udevd): handle root=gpt-auto for systemd-v258 - fix(systemd-repart): allow partition format - feat(install.d): do not remove UKIs on remove) - fix(dracut.install): remove extraneous quotes in dracut arguments - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571 - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells - test: fixup NFS test.sh Resolves: RHEL-108215,RHEL-97473 - fix: improve hostonly sloppy mode - fix(dracut.sh): don't pass empty string as dir - feat(systemd): drop unnecessary dependency on libgcrypt - fix(kernel-modules-extra): remove stray before / - Revert "fix(base): do not require chroot inside initramfs" - fix: let check_vol_slaves_all return 1 when checks on all slaves fail - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces - fix(74nvmf): set root=nvmf Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897 - Upgrade to dracut 107 Resolves: RHEL-97473 - fix(rescue): create hmac file for rescue kernel - fix(ossl): copy executables for the test suite - fix(openssl): harden ossl build CFLAGS Related: RHEL-76323 - build: upgrade to dracut 105 - fix(systemd-ask-password): do not half-install systemd-ask-password-wall - fix(pcsc): add libpcsclite_real.so.* - revert: "fix(rescue): make rescue always no-hostonly" - fix(dracut-install): initize fts pointer - feat: add openssl module - build: make erofs the default requirement for squash subpackage Resolves: RHEL-65204,RHEL-68935,RHEL-76323 - Update to dracut 103. - feat(fips-crypto-policies): make c-p follow FIPS mode automatically - fix(fips-crypto-policies): make it depend on fips dracut module Resolves: RHEL-59678,RHEL-65204 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build: rebuild without an obsoleted patch - fix(base): escape arguments in initqueue hook script generation - fix(net-lib): warn on suspicious shell metacharacters in hostname file - fix(systemd-networkd): escape DHCP lease values in dhcpopts generation Related: RHEL-170844 - fix(network-legacy): remove network-legacy completely from the codebase - fix(iscsi): replace `echo` writes with `printf` to prevent variable injection Resolves: RHEL-170844 - fix(systemd-udevd): handle root=gpt-auto for systemd-v258 - fix(systemd-repart): allow partition format - feat(install.d): do not remove UKIs on remove) - fix(dracut.install): remove extraneous quotes in dracut arguments - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571 - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells - test: fixup NFS test.sh Resolves: RHEL-108215,RHEL-97473 - fix: improve hostonly sloppy mode - fix(dracut.sh): don't pass empty string as dir - feat(systemd): drop unnecessary dependency on libgcrypt - fix(kernel-modules-extra): remove stray before / - Revert "fix(base): do not require chroot inside initramfs" - fix: let check_vol_slaves_all return 1 when checks on all slaves fail - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces - fix(74nvmf): set root=nvmf Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897 - Upgrade to dracut 107 Resolves: RHEL-97473 - fix(rescue): create hmac file for rescue kernel - fix(ossl): copy executables for the test suite - fix(openssl): harden ossl build CFLAGS Related: RHEL-76323 - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded" - build: rebuild without an obsoleted patch - fix(base): escape arguments in initqueue hook script generation - fix(net-lib): warn on suspicious shell metacharacters in hostname file - fix(systemd-networkd): escape DHCP lease values in dhcpopts generation Related: RHEL-170844 - fix(network-legacy): remove network-legacy completely from the codebase - fix(iscsi): replace `echo` writes with `printf` to prevent variable injection Resolves: RHEL-170844 - fix(systemd-udevd): handle root=gpt-auto for systemd-v258 - fix(systemd-repart): allow partition format - feat(install.d): do not remove UKIs on remove) - fix(dracut.install): remove extraneous quotes in dracut arguments - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571 - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells - test: fixup NFS test.sh Resolves: RHEL-108215,RHEL-97473 - fix: improve hostonly sloppy mode - fix(dracut.sh): don't pass empty string as dir - feat(systemd): drop unnecessary dependency on libgcrypt - fix(kernel-modules-extra): remove stray before / - Revert "fix(base): do not require chroot inside initramfs" - fix: let check_vol_slaves_all return 1 when checks on all slaves fail - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces - fix(74nvmf): set root=nvmf Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897 - Upgrade to dracut 107 Resolves: RHEL-97473 - fix(rescue): create hmac file for rescue kernel - fix(ossl): copy executables for the test suite - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in splitsep and export_n - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded" - build: rebuild without an obsoleted patch - fix(base): escape arguments in initqueue hook script generation - fix(net-lib): warn on suspicious shell metacharacters in hostname file - fix(systemd-networkd): escape DHCP lease values in dhcpopts generation Related: RHEL-170844 - fix(network-legacy): remove network-legacy completely from the codebase - fix(iscsi): replace `echo` writes with `printf` to prevent variable injection Resolves: RHEL-170844 - fix(systemd-udevd): handle root=gpt-auto for systemd-v258 - fix(systemd-repart): allow partition format - feat(install.d): do not remove UKIs on remove) - fix(dracut.install): remove extraneous quotes in dracut arguments - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571 - test(SYSTEMD-INITRD): be more careful with `set -e` and subshells - test: fixup NFS test.sh Resolves: RHEL-108215,RHEL-97473 - fix: improve hostonly sloppy mode - fix(dracut.sh): don't pass empty string as dir - feat(systemd): drop unnecessary dependency on libgcrypt - fix(kernel-modules-extra): remove stray before / - Revert "fix(base): do not require chroot inside initramfs" - fix: let check_vol_slaves_all return 1 when checks on all slaves fail - improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces - fix(74nvmf): set root=nvmf Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897 - Upgrade to dracut 107 Resolves: RHEL-97473 - fix(rescue): create hmac file for rescue kernel - Rebase to upstream v0.0.33 Resolves: RHEL-114117 - Fix regression in selftest introduced in 0.0.31-3 - Add man page for drgn Resolves: RHEL-97801 - Rebuild for libkdumpfile 0.5.5 Resolves: RHEL-86263 - Rebase to upstream v0.0.31 Resolves: RHEL-86265 - Rebase to upstream v0.0.29 Resolves: RHEL-61657 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Enable brew-build.tier0.functional test - Remove autorelease and autochangelog - Bump release for June 2024 mass rebuild - Remove brew-build.tier0.functional test - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Updated to 0.115 (RHEL-11393) - Import gating from c9s - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448] - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448] - Resolves: RHEL-64318 ([RHEL10][CS10] dtc fails to build with Swig 4.3.0) - Resolves: RHEL-65448 ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix missing dynamic tags for aarch64 python3 pylibfdt - Resolves: RHEL-33493 (Annocheck FAIL: bind-now (dtc)) - Bump release for June 2024 mass rebuild - dtc-Properly-harden-built-packages.patch [RHEL-33493] - Resolves: RHEL-33493 (Annocheck FAIL: bind-now (dtc)) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Don't install a Python .egg - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rework the selection of functions to represent in BTF, for instance: - Skip functions that passes values thru the stack when those structs don't have expected alignment due to some attribute usage that then causes problems with BTF trampolines due to lack of expressiveness in BTF to signal such special cases. - Skip objects (compile units) without DWARF: don't stop a multi object encoding session just because one doesn't have any DWARF in it. - Fix BTF dedup by updating libbpf. - Fix the inference of the explicit alignment attribute of zero length arrays, like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no explicit alignment attribute encoding. - Fix the inference of alignments after bitfields, such as in struct nft_rule_dp->data[] after ->handle:42, also in the Linux kernel. - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct. - Add comparision of functions encoded in BTF between baseline 'master' branch and current branch, i.e. 'next'. - New release: 1.30 - Better detection of abort during DWARF loader thread processing - pahole now detects presence of libbpf APIs and BTF features using weak function declarations when built using a shared library libbpf - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature - New release: 1.29 - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads. - The BTF encoding now is always reproducible, and as fast/faster than before. - The memory consumption is reduced. - Support for multiple BTF_DECL_TAGs pointing to same tag. - Verify that pfunct prints btf_decl_tags read from BTF. - Don't print functions twice when using 'pfunct -f function_name'. - New release: 1.28 - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding. - Show flexible arrays statistics - Add '--padding N' and '--padding_ge N' to show structs with paddings - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel. - Don't stop pfunct output at the first function that matches a filter, show all of them - Allow encoding data about all global variables, not just per CPU ones - Handle .BTF_ids section endianness, fully supporting cross builds - Generate decl tags for bpf_fastcall for eligible kfuncs - Add "distilled_base" BTF feature to split BTF generation. - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var - Serialize access to elfutils dwarf_getlocation(). - Honour --lang_exclude when merging LTO built CUs. - Add the debuginfod client cache directory to the vmlinux search path. - Print the CU's language when a tag isn't supported. - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags. - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value - Introduce a tests/ directory with regression tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Backport upstream bugfixes for clang builds Resolves: RHEL-54228 - Resolves: RHEL-45148 - Add gating.yaml - Add "Provides: pahole" - New release: v1.26 - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too. - Print number of holes, bit holes and bit paddings in class member types. - Introduce --contains_enumerator=ENUMERATOR_NAME: - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum". - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF. - Fix loading DW_TAG_subroutine_type generated by the Go compiler. - Fix loading of 32-bit signed enums from BTF. - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding. - Parallelize loading BTF and DWARF, speeding up a bit btfdiff. - Do type expansion to cover "private" types and enumerations in btfdiff. - New release: v1.27 - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result. - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file. - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it. - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output. - Fix hole discovery with inheritance in C++. - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to dwz 0.16 - Bump release for June 2024 mass rebuild - Bump release for SPDX change. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebased to dyninst 13.0.0 + buildability patches - Dropping testsuite - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for Boost 1.83 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - side-tag respin - migrated to SPDX license - Update to 12.3.0 - Add patch for cmake 3.27 support - Bump release for SPDX rebuild - Related: RHEL-119484 - debugfs: byteswap dirsearch dirent buf on big endian systems Resolves: RHEL-74431 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable metadata_csum_seed and orphan_file features in mke2fs.conf - Rebase to new upstream - Remove stale patch from the package - Bump release for June 2024 mass rebuild - Recommends: /usr/sbin/sendmail rather than sendmail as many packages can provide a /usr/sbin/sendmail command - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating - Resolves: RHEL-52907 - Switch to using Java 21 as the default JDK - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Build with default Java version - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 0.12.9 - Update to 0.12.8 (close RHBZ#2292212) - Update to 0.12.7 (close RHBZ#2272370) - Use bundled uthash in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 0.12.6 (close RHBZ#2162811) - Update License to SPDX - Document and/or unbundle all bundled libraries - Pin the X64 firmware ISA baseline to x86-64-v2 - edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182421] - edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165699] - Resolves: RHEL-182421 (edk2/x64: re-enable legacy kernel loader [rhel-10.2.z]) - Resolves: RHEL-165699 (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-10.2]) - edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161573] - Resolves: RHEL-161573 (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.2]) - edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696] - Resolves: RHEL-150696 (edk2: Add JSON descriptors for uefi-vars builds) - edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956] - edk2-update-openssl-rhel-submodule.patch [RHEL-147785] - edk2-update-openssl-rhel-tarball.patch [RHEL-147785] - Resolves: RHEL-134956 (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2]) - Resolves: RHEL-147785 ([edk2] pick up openssl updates) - edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470] - edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470] - edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470] - edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470] - edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470] - Resolves: RHEL-139470 (Enable memory debug logging support in firmware image configs) - edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335] - Resolves: RHEL-138335 ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration) - Rebase to edk2-stable202511 [RHEL-118386] - Resolves: RHEL-118386 ([edk2,rhel-10] rebase to edk2-stable202511) - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085] - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085] - Resolves: RHEL-126085 ([edk2,rhel-10] dbx update to 20251016 / v1.6.1) - edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880] - Resolves: RHEL-115880 (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2]) - edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182421] - edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165699] - Resolves: RHEL-182421 (edk2/x64: re-enable legacy kernel loader [rhel-10.2.z]) - Resolves: RHEL-165699 (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-10.2]) - edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161573] - Resolves: RHEL-161573 (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.2]) - edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696] - Resolves: RHEL-150696 (edk2: Add JSON descriptors for uefi-vars builds) - edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956] - edk2-update-openssl-rhel-submodule.patch [RHEL-147785] - edk2-update-openssl-rhel-tarball.patch [RHEL-147785] - Resolves: RHEL-134956 (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2]) - Resolves: RHEL-147785 ([edk2] pick up openssl updates) - edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470] - edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470] - edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470] - edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470] - edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470] - Resolves: RHEL-139470 (Enable memory debug logging support in firmware image configs) - edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335] - Resolves: RHEL-138335 ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration) - Rebase to edk2-stable202511 [RHEL-118386] - Resolves: RHEL-118386 ([edk2,rhel-10] rebase to edk2-stable202511) - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085] - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085] - Resolves: RHEL-126085 ([edk2,rhel-10] dbx update to 20251016 / v1.6.1) - edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880] - Resolves: RHEL-115880 (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2]) - edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548] - Resolves: RHEL-109548 ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin) - edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696] - Resolves: RHEL-150696 (edk2: Add JSON descriptors for uefi-vars builds) - edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956] - edk2-update-openssl-rhel-submodule.patch [RHEL-147785] - edk2-update-openssl-rhel-tarball.patch [RHEL-147785] - Resolves: RHEL-134956 (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2]) - Resolves: RHEL-147785 ([edk2] pick up openssl updates) - edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470] - edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470] - edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470] - edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470] - edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470] - Resolves: RHEL-139470 (Enable memory debug logging support in firmware image configs) - edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335] - Resolves: RHEL-138335 ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration) - Rebase to edk2-stable202511 [RHEL-118386] - Resolves: RHEL-118386 ([edk2,rhel-10] rebase to edk2-stable202511) - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085] - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085] - Resolves: RHEL-126085 ([edk2,rhel-10] dbx update to 20251016 / v1.6.1) - edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880] - Resolves: RHEL-115880 (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2]) - edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548] - Resolves: RHEL-109548 ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin) - Rebase to edk2-stable202508 [RHEL-111718] - Resolves: RHEL-111718 ([edk2,rhel-10] rebase to edk2-stable202508) - edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908] - edk2-add-dbx-update-script.patch [RHEL-96866] - edk2-update-dbx-to-20250610.patch [RHEL-96866] - Resolves: RHEL-2908 ([aarch64][EDK2] UEFI writable variable service in QEMU) - Resolves: RHEL-96866 ([edk2,rhel-10] dbx update 20250610) - Pin the X64 firmware ISA baseline to x86-64-v2 - edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182421] - edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165699] - Resolves: RHEL-182421 (edk2/x64: re-enable legacy kernel loader [rhel-10.2.z]) - Resolves: RHEL-165699 (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-10.2]) - edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161573] - Resolves: RHEL-161573 (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.2]) - edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696] - Resolves: RHEL-150696 (edk2: Add JSON descriptors for uefi-vars builds) - edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956] - edk2-update-openssl-rhel-submodule.patch [RHEL-147785] - edk2-update-openssl-rhel-tarball.patch [RHEL-147785] - Resolves: RHEL-134956 (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2]) - Resolves: RHEL-147785 ([edk2] pick up openssl updates) - edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470] - edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470] - edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470] - edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470] - edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470] - Resolves: RHEL-139470 (Enable memory debug logging support in firmware image configs) - edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335] - Resolves: RHEL-138335 ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration) - Rebase to edk2-stable202511 [RHEL-118386] - Resolves: RHEL-118386 ([edk2,rhel-10] rebase to edk2-stable202511) - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085] - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085] - Resolves: RHEL-126085 ([edk2,rhel-10] dbx update to 20251016 / v1.6.1) - edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880] - Resolves: RHEL-115880 (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2]) - edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182421] - edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165699] - Resolves: RHEL-182421 (edk2/x64: re-enable legacy kernel loader [rhel-10.2.z]) - Resolves: RHEL-165699 (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-10.2]) - edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161573] - Resolves: RHEL-161573 (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.2]) - edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696] - Resolves: RHEL-150696 (edk2: Add JSON descriptors for uefi-vars builds) - edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956] - edk2-update-openssl-rhel-submodule.patch [RHEL-147785] - edk2-update-openssl-rhel-tarball.patch [RHEL-147785] - Resolves: RHEL-134956 (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2]) - Resolves: RHEL-147785 ([edk2] pick up openssl updates) - edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470] - edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470] - edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470] - edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470] - edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470] - Resolves: RHEL-139470 (Enable memory debug logging support in firmware image configs) - edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335] - Resolves: RHEL-138335 ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration) - Rebase to edk2-stable202511 [RHEL-118386] - Resolves: RHEL-118386 ([edk2,rhel-10] rebase to edk2-stable202511) - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085] - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085] - Resolves: RHEL-126085 ([edk2,rhel-10] dbx update to 20251016 / v1.6.1) - edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880] - Resolves: RHEL-115880 (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2]) - edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548] - Resolves: RHEL-109548 ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin) - Add support for versioned x86_64 arches - Bump release for previous commit - Related: #RHELMISC-8249 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - source: Updated the archive to match upstream - Resolves: #RHEL-54694 - Update to efi-rpm-macros version 6 - Resolves: #RHEL-50848 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to efivar-39 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix inheritance of buildflags - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Split xdriinfo into its own package - Remove xdriinfo additional source build and autotools dependencies - SPDX migration: license is already SPDX compatible - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Install all necessary shader files (#1373299) - Update to 9.0.0 - Enable vulkan demos - Update to 8.5.0 - Change build system to meson - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - tests: fix filter to include missing gating tests - tests: fix URL to internal tests repo - Unset custom linker flags - Improve the security of the generated code by hardening - Fix CVE-2024-53920 arbitrary code execution vulnerability - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - tests: fix filter to include missing gating tests - tests: fix URL to internal tests repo - Unset custom linker flags - Generalize trusted-content-p check to all Flymake backends (CVE-2026-96442) - tramp: restrict user name to prevent shell injection (CVE-2026-79992) - image: fix integer overflow in pbm_load (CVE-2026-77219) - Fix CVE-2024-53920 arbitrary code execution vulnerability - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Version 13.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Version 13.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - tests: fix filter to include missing gating tests - tests: fix URL to internal tests repo - Unset custom linker flags - Improve the security of the generated code by hardening - Fix CVE-2024-53920 arbitrary code execution vulnerability - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - tests: fix filter to include missing gating tests - tests: fix URL to internal tests repo - Unset custom linker flags - Generalize trusted-content-p check to all Flymake backends (CVE-2026-96442) - tramp: restrict user name to prevent shell injection (CVE-2026-79992) - image: fix integer overflow in pbm_load (CVE-2026-77219) - Fix CVE-2024-53920 arbitrary code execution vulnerability - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - tests: fix filter to include missing gating tests - tests: fix URL to internal tests repo - Unset custom linker flags - Improve the security of the generated code by hardening - Fix CVE-2024-53920 arbitrary code execution vulnerability - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - tests: fix filter to include missing gating tests - tests: fix URL to internal tests repo - Unset custom linker flags - Generalize trusted-content-p check to all Flymake backends (CVE-2026-96442) - tramp: restrict user name to prevent shell injection (CVE-2026-79992) - image: fix integer overflow in pbm_load (CVE-2026-77219) - Fix CVE-2024-53920 arbitrary code execution vulnerability - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - tests: fix filter to include missing gating tests - tests: fix URL to internal tests repo - Unset custom linker flags - Improve the security of the generated code by hardening - Fix CVE-2024-53920 arbitrary code execution vulnerability - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - tests: fix filter to include missing gating tests - tests: fix URL to internal tests repo - Unset custom linker flags - Generalize trusted-content-p check to all Flymake backends (CVE-2026-96442) - tramp: restrict user name to prevent shell injection (CVE-2026-79992) - image: fix integer overflow in pbm_load (CVE-2026-77219) - Fix CVE-2024-53920 arbitrary code execution vulnerability - Fix flymake tests with GCC 14 - Pong and Tetris are excluded - Fix man.el shell injection vulnerability - Add libtree-sitter as runtime dependency - Bump release - Bump release for October 2024 mass rebuild: - Update to 2.6.9 Resolves: RHEL-32770 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 2.6.7 - Rebuild (icu) - Update to 2.6.6 - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.6.5 - Update to 2.6.9 Resolves: RHEL-32770 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 2.6.7 - Rebuild (icu) - Update to 2.6.6 - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.6.5 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX license scan and migration - %patch macro migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c Resolves: CVE-2023-49990 - Fixed buffer underflow in CountVowelPosition function at synthdata.c Resolves: CVE-2023-49991 - Fixed buffer overflow in RemoveEnding at dictionary.c Resolves: CVE-2023-49992 - Fixed buffer overflow in ReadClause function at readclause.c Resolves: CVE-2023-49993 - Fixed floating point exception in PeaksToHarmspect at wavegen.c Resolves: CVE-2023-49994 - Change license tag so it fully conforms to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: RHEL-77352 (EBackend: Change when adding signal handler for "network-changed") - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-52806 (Update to 3.52.4) - Resolves: RHEL-45599 (Update to 3.52.3) - Bump release for June 2024 mass rebuild - Resolves: RHEL-38639 (Update to 3.52.2) - Resolves: RHEL-33592 (Backport Fedora 40 changes) - Update to 3.52.1 - Resolves: RHEL-30204 (Backport Fedora 40 changes) - Update to 3.52.0 - Add patch to allow reconfiguring the dbus-prefix without rebuilding; this is needed to make EDS work with the new Flatpak infrastructure. - Remove support _eds_dbus_services_prefix - this was only used by F38 and earlier Flatpak builds. - Update to 3.51.2 - Rebuild for ICU 74 - Resolves: RHEL-77352 (EBackend: Change when adding signal handler for "network-changed") - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-52806 (Update to 3.52.4) - Resolves: RHEL-45599 (Update to 3.52.3) - Bump release for June 2024 mass rebuild - Resolves: RHEL-38639 (Update to 3.52.2) - Resolves: RHEL-33592 (Backport Fedora 40 changes) - Update to 3.52.1 - Resolves: RHEL-30204 (Backport Fedora 40 changes) - Update to 3.52.0 - Add patch to allow reconfiguring the dbus-prefix without rebuilding; this is needed to make EDS work with the new Flatpak infrastructure. - Remove support _eds_dbus_services_prefix - this was only used by F38 and earlier Flatpak builds. - Update to 3.51.2 - Rebuild for ICU 74 - Resolves: RHEL-77352 (EBackend: Change when adding signal handler for "network-changed") - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-52806 (Update to 3.52.4) - Resolves: RHEL-45599 (Update to 3.52.3) - Bump release for June 2024 mass rebuild - Resolves: RHEL-38639 (Update to 3.52.2) - Resolves: RHEL-33592 (Backport Fedora 40 changes) - Update to 3.52.1 - Resolves: RHEL-30204 (Backport Fedora 40 changes) - Update to 3.52.0 - Add patch to allow reconfiguring the dbus-prefix without rebuilding; this is needed to make EDS work with the new Flatpak infrastructure. - Remove support _eds_dbus_services_prefix - this was only used by F38 and earlier Flatpak builds. - Update to 3.51.2 - Rebuild for ICU 74 - Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print - Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19 Among others fixes ipmievd startup (fedora#2303185) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update IANA numbers - Apply patch from CentOS Stream, never applied upstream: Disable retry of pre-session "Get cipher suites" command as some BMCs are ignoring it (#1831158) - Apply patches from Debian, never applied upstream: - fix tsol buffer overflow, https://sourceforge.net/p/ipmitool/mailman/message/24405281/ - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/ - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to version 2.6.4 Resolves #2221013 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to version 2.6.3 Resolves #2152330 - Revert: remove rpath patch Resolves: RHEL-80106 - Fix CVE-2025-26623 exiv2: Use After Free Resolves: RHEL-80106 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Backport RHEL9 patch for RPATH Resolves: RHEL-45267 - 0.28.3 Resolves: RHEL-45267 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Revert: remove rpath patch Resolves: RHEL-80106 - Fix CVE-2025-26623 exiv2: Use After Free Resolves: RHEL-80106 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Backport RHEL9 patch for RPATH Resolves: RHEL-45267 - 0.28.3 Resolves: RHEL-45267 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebase to 2.7.3 and add VCS tag - https://issues.redhat.com/browse/RHELMISC-13073 - Fix behavior change caused by fix for CVE-2024-8176 - Fix CVE-2024-8176 - Rebase to 2.6.4 - Bump release for October 2024 mass rebuild: - Rebase to 2.6.2 - Bump release for June 2024 mass rebuild - Update of fmf plans and gating for c10s - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - expat: backport CVE-2026-45186 fix (attribute collision check DoS) - Rebase to 2.7.3 and add VCS tag - https://issues.redhat.com/browse/RHELMISC-13073 - Fix behavior change caused by fix for CVE-2024-8176 - Fix CVE-2024-8176 - Rebase to 2.6.4 - Bump release for October 2024 mass rebuild: - Rebase to 2.6.2 - Bump release for June 2024 mass rebuild - Update of fmf plans and gating for c10s - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Fix CVE-2026-50219: forbid XML_ParserFree/Reset from handlers - expat: backport CVE-2026-45186 fix (attribute collision check DoS) - Rebase to 2.7.3 and add VCS tag - https://issues.redhat.com/browse/RHELMISC-13073 - Fix behavior change caused by fix for CVE-2024-8176 - Fix CVE-2024-8176 - Rebase to 2.6.4 - Bump release for October 2024 mass rebuild: - CVE-2026-66046 expat: Expat: Denial of Service via quadratic complexity in attribute processing - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Fix CVE-2026-50219: forbid XML_ParserFree/Reset from handlers - expat: backport CVE-2026-45186 fix (attribute collision check DoS) - Rebase to 2.7.3 and add VCS tag - https://issues.redhat.com/browse/RHELMISC-13073 - Fix behavior change caused by fix for CVE-2024-8176 - Fix CVE-2024-8176 - Rebase to 2.6.4 - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expat_realloc - CVE-2026-77214 expat: expat: Information disclosure via heap buffer over- read in XML_ParseBuffer - CVE-2026-66046 expat: Expat: Denial of Service via quadratic complexity in attribute processing - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Fix CVE-2026-50219: forbid XML_ParserFree/Reset from handlers - expat: backport CVE-2026-45186 fix (attribute collision check DoS) - Rebase to 2.7.3 and add VCS tag - https://issues.redhat.com/browse/RHELMISC-13073 - Fix behavior change caused by fix for CVE-2024-8176 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use Tcl 8.4 channel type (GCC 14 compatibility) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update configure for building in strict C99 mode - fapolicyd-1.4.5 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.5 - fapolicyd-1.4.4 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.4 - Fix 32-bit ELF dynamic section parsing - Fix binary path of rpm-loader - Map file with MAP_SHARED instead of MAP_PRIVATE - Fix segfault when interrupting fapolicyd startup - fapolicyd-1.4.3 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3 https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1 - fapolicyd-1.4.2 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.2 - Install SELinux policy hardening module - Fix deadlock on reconfigure - On reconfigure, update the trust list and reload the rpm filter - fapolicyd-1.4 and fapolicyd-selinux-1.0 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4 - fapolicyd-1.3.7 and fapolicyd-selinux-0.9 - fapolicyd-1.4.5 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.5 - fapolicyd-1.4.4 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.4 - Fix 32-bit ELF dynamic section parsing - Fix binary path of rpm-loader - Map file with MAP_SHARED instead of MAP_PRIVATE - Fix segfault when interrupting fapolicyd startup - fapolicyd-1.4.3 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3 https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1 - fapolicyd-1.4.2 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.2 - Install SELinux policy hardening module - Fix deadlock on reconfigure - On reconfigure, update the trust list and reload the rpm filter - fapolicyd-1.4 and fapolicyd-selinux-1.0 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4 - fapolicyd-1.3.7 and fapolicyd-selinux-0.9 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix vendored sources. * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3 - Resolves: RHEL-77724 - Update to 0.5.1 - Update to 0.5.0 - Update to 0.4.13 - Update to 0.4.12 - Update to 0.4.11 - Updates for eln/c9s building - Update to 0.4.10 - More spec updates - Fix vendored sources. * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3 - Resolves: RHEL-77724 - Update to 0.5.1 - Update to 0.5.0 - Update to 0.4.13 - Update to 0.4.12 - Update to 0.4.11 - Updates for eln/c9s building - Update to 0.4.10 - More spec updates - Fix vendored sources. * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3 - Resolves: RHEL-77724 - Update to 0.5.1 - Update to 0.5.0 - Update to 0.4.13 - Update to 0.4.12 - Update to 0.4.11 - Updates for eln/c9s building - Update to 0.4.10 - More spec updates - Fix vendored sources. * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3 - Resolves: RHEL-77724 - Update to 0.5.1 - Update to 0.5.0 - Update to 0.4.13 - Update to 0.4.12 - Update to 0.4.11 - Updates for eln/c9s building - Update to 0.4.10 - More spec updates - Fix vendored sources. * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3 - Resolves: RHEL-77724 - Update to 0.5.1 - Update to 0.5.0 - Update to 0.4.13 - Update to 0.4.12 - Update to 0.4.11 - Updates for eln/c9s building - Update to 0.4.10 - More spec updates - Fix vendored sources. * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3 - Resolves: RHEL-77724 - Update to 0.5.1 - Update to 0.5.0 - Update to 0.4.13 - Update to 0.4.12 - Update to 0.4.11 - Updates for eln/c9s building - Update to 0.4.10 - More spec updates - Fix vendored sources. * chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3 - Resolves: RHEL-77724 - Update to 0.5.1 - Update to 0.5.0 - Update to 0.4.13 - Update to 0.4.12 - Update to 0.4.11 - Updates for eln/c9s building - Update to 0.4.10 - More spec updates - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - fence_ibm_powervs: fix plaintext token file support Resolves: RHEL-88569 - fence_nutanix_ahv: new fence agent Resolves: RHEL-68322 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_kubevirt: use hard poweroff Resolves: RHEL-95379 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107504 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-185610 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-155668 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142445 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145086 - fence_virt: print error messages to sderr Resolves: RHEL-125959 - fence_gce: fix node list limit Resolves: RHEL-128925 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114752 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-78241 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to fetchmail-6.4.38 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Update to fetchmail-6.4.37 - Update to fetchmail-6.4.36 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix CVE-2026-94184: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) Resolves: RHEL-265187 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Disable openmpi for i686 architecture - Enable openmpi for RHEL - Resolves: RHEL-65277 - Re-enable openmpi for s390x - Resolves: RHEL-65277 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix i686 build by disabling openmpi - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075) - Disable mpich on s390x to fix the build - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix memory leak in credman Resolves: RHEL-35253 - Bump release for June 2024 mass rebuild - Rebuilt for libcbor 0.11.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.14.0 release ( resolves: rhbz#2249531 ) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for libcbor 0.10.2 - Update to 1.13.0 release ( resolves: rhbz#2172297 ) - Perform some deglobing of files per packaging guidelines - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to upstream version 3.36 - Related: rhbz#2245247 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Re-enable rados, rbd on ppc64le - Drop libpmem support from RHEL 10+ builds - New upstream version (RHBZ#2209407) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to upstream version 3.36 - Related: rhbz#2245247 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Re-enable rados, rbd on ppc64le - Drop libpmem support from RHEL 10+ builds - New upstream version (RHBZ#2209407) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to upstream version 3.36 - Related: rhbz#2245247 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Re-enable rados, rbd on ppc64le - Drop libpmem support from RHEL 10+ builds - New upstream version (RHBZ#2209407) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to upstream version 3.36 - Related: rhbz#2245247 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Re-enable rados, rbd on ppc64le - Drop libpmem support from RHEL 10+ builds - New upstream version (RHBZ#2209407) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to upstream version 3.36 - Related: rhbz#2245247 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Re-enable rados, rbd on ppc64le - Drop libpmem support from RHEL 10+ builds - New upstream version (RHBZ#2209407) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to upstream version 3.36 - Related: rhbz#2245247 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Re-enable rados, rbd on ppc64le - Drop libpmem support from RHEL 10+ builds - New upstream version (RHBZ#2209407) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to upstream version 3.36 - Related: rhbz#2245247 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Re-enable rados, rbd on ppc64le - Drop libpmem support from RHEL 10+ builds - New upstream version (RHBZ#2209407) - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.5.0 ESR - Update to 140.4.0 ESR - Update to 140.3.0 - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.5.0 ESR - Update to 140.4.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.5.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.15.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.16.0 ESR - Update to 140.15.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.17.0 ESR - Update to 140.16.0 ESR - Update to 140.15.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - rebase package to v2.4.0 - rebase package to v2.3.1 - revert RHEL only patch to default StrictForwardPorts=yes - rebase package to v2.3.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase package to v2.2.1 - fix firewalld.conf when upgrading from old versions that had a symlink - rebase package to v2.2.0 - Bump release for June 2024 mass rebuild - fix missing policykit symlink - rebase package to v2.4.2 - rebase package to v2.4.0 - rebase package to v2.3.1 - revert RHEL only patch to default StrictForwardPorts=yes - rebase package to v2.3.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase package to v2.2.1 - fix firewalld.conf when upgrading from old versions that had a symlink - rebase package to v2.2.0 - Bump release for June 2024 mass rebuild - rebuild to bump NVR; no changes - rebase package to v2.4.3 - rebase package to v2.4.2 - rebase package to v2.4.0 - rebase package to v2.3.1 - revert RHEL only patch to default StrictForwardPorts=yes - rebase package to v2.3.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase package to v2.2.1 - fix firewalld.conf when upgrading from old versions that had a symlink - rebase package to v2.4.0 - rebase package to v2.3.1 - revert RHEL only patch to default StrictForwardPorts=yes - rebase package to v2.3.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase package to v2.2.1 - fix firewalld.conf when upgrading from old versions that had a symlink - rebase package to v2.2.0 - Bump release for June 2024 mass rebuild - fix missing policykit symlink - rebase package to v2.4.2 - rebase package to v2.4.0 - rebase package to v2.3.1 - revert RHEL only patch to default StrictForwardPorts=yes - rebase package to v2.3.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase package to v2.2.1 - fix firewalld.conf when upgrading from old versions that had a symlink - rebase package to v2.2.0 - Bump release for June 2024 mass rebuild - rebuild to bump NVR; no changes - rebase package to v2.4.3 - rebase package to v2.4.2 - rebase package to v2.4.0 - rebase package to v2.3.1 - revert RHEL only patch to default StrictForwardPorts=yes - rebase package to v2.3.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase package to v2.2.1 - fix firewalld.conf when upgrading from old versions that had a symlink - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - update to 1.4.3 - convert license tag to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Check GPG signature - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Drop unused libusb-0.1 dependency - Update to latest upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - Backport: Enable collection IDs for OCI remotes Resolves: RHEL-72779 - Rebase backported upstream patches to updated versions Resolves: RHEL-26066 - Update to 1.16.0 Resolves: RHEL-72779 - Add support for preinstalling Flatpaks Resolves: RHEL-26066 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157 - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - Backport: Enable collection IDs for OCI remotes Resolves: RHEL-72779 - Rebase backported upstream patches to updated versions Resolves: RHEL-26066 - Update to 1.16.0 Resolves: RHEL-72779 - Add support for preinstalling Flatpaks Resolves: RHEL-26066 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267891 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267432 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271519 - Align backport with the other branches Resolves: RHEL-258970 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258970 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157 - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - Update to 1.4.4 Resolves: RHEL-47749 - Remove dependency on Python2 Resolves: RHEL-68320 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 1.4.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.4.0 - Update to 1.3.5 - Update to 1.3.4 (#2212349) - Enable installed tests - Disable %check - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Disable git hooks when applying patches (CVE-2026-86320) Resolves: RHEL-262185 - Update to 1.4.4 Resolves: RHEL-47749 - Remove dependency on Python2 Resolves: RHEL-68320 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - Backport: Enable collection IDs for OCI remotes Resolves: RHEL-72779 - Rebase backported upstream patches to updated versions Resolves: RHEL-26066 - Update to 1.16.0 Resolves: RHEL-72779 - Add support for preinstalling Flatpaks Resolves: RHEL-26066 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157 - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - Backport: Enable collection IDs for OCI remotes Resolves: RHEL-72779 - Rebase backported upstream patches to updated versions Resolves: RHEL-26066 - Update to 1.16.0 Resolves: RHEL-72779 - Add support for preinstalling Flatpaks Resolves: RHEL-26066 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267891 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267432 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271519 - Align backport with the other branches Resolves: RHEL-258970 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258970 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157 - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - Backport: Enable collection IDs for OCI remotes Resolves: RHEL-72779 - Rebase backported upstream patches to updated versions Resolves: RHEL-26066 - Update to 1.16.0 Resolves: RHEL-72779 - Add support for preinstalling Flatpaks Resolves: RHEL-26066 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157 - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - Backport: Enable collection IDs for OCI remotes Resolves: RHEL-72779 - Rebase backported upstream patches to updated versions Resolves: RHEL-26066 - Update to 1.16.0 Resolves: RHEL-72779 - Add support for preinstalling Flatpaks Resolves: RHEL-26066 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267891 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267432 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271519 - Align backport with the other branches Resolves: RHEL-258970 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258970 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157 - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - Backport: Enable collection IDs for OCI remotes Resolves: RHEL-72779 - Rebase backported upstream patches to updated versions Resolves: RHEL-26066 - Update to 1.16.0 Resolves: RHEL-72779 - Add support for preinstalling Flatpaks Resolves: RHEL-26066 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157 - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - Backport: Enable collection IDs for OCI remotes Resolves: RHEL-72779 - Rebase backported upstream patches to updated versions Resolves: RHEL-26066 - Update to 1.16.0 Resolves: RHEL-72779 - Add support for preinstalling Flatpaks Resolves: RHEL-26066 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267891 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267432 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271519 - Align backport with the other branches Resolves: RHEL-258970 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258970 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157 - kill: Do not kill pid 0 and embrace races Resolves: RHEL-140924 - Enable FIPS crypto policy if it is enabled on the host Resolves: RHEL-77484 - Get certificates from /etc/pki/entitlement for registry.redhat.io Resolves: RHEL-85004 - Fix wrongly marked failed installs as pre-installed Resolves: RHEL-89989 - Fix crash and installatcion of OCI images Resolves: RHEL-76958 - Rebuild with selinux-policy-40.13.23-1 Resolves: RHEL-36741 - Update to 1.0.6 Resolves: RHEL-71540 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.0.6 Resolves: RHEL-71540 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Provide flex-doc via the main flex package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Analyse flex sources for license information - Migrate License field to SPDX identifiers for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2 (#2222083) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 3.4.2 (rhbz#2264712) - Disable ATLAS and BLIS in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.4.1 - Update to 3.4.0 - License changes to LGPL-3.0-or-later - Add Supplements to help pull wrappers if libraries are installed directly - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 3.4.2 (rhbz#2264712) - Disable ATLAS and BLIS in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.4.1 - Update to 3.4.0 - License changes to LGPL-3.0-or-later - Add Supplements to help pull wrappers if libraries are installed directly - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 3.4.2 (rhbz#2264712) - Disable ATLAS and BLIS in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.4.1 - Update to 3.4.0 - License changes to LGPL-3.0-or-later - Add Supplements to help pull wrappers if libraries are installed directly - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 3.4.2 (rhbz#2264712) - Disable ATLAS and BLIS in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.4.1 - Update to 3.4.0 - License changes to LGPL-3.0-or-later - Add Supplements to help pull wrappers if libraries are installed directly - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 3.4.2 (rhbz#2264712) - Disable ATLAS and BLIS in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.4.1 - Update to 3.4.0 - License changes to LGPL-3.0-or-later - Add Supplements to help pull wrappers if libraries are installed directly - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 3.4.2 (rhbz#2264712) - Disable ATLAS and BLIS in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.4.1 - Update to 3.4.0 - License changes to LGPL-3.0-or-later - Add Supplements to help pull wrappers if libraries are installed directly - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 3.4.2 (rhbz#2264712) - Disable ATLAS and BLIS in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.4.1 - Update to 3.4.0 - License changes to LGPL-3.0-or-later - Add Supplements to help pull wrappers if libraries are installed directly - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Obsolete the fontawesome-fonts package (bz 2239785) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Move fonts back to /usr/share/fonts/fontawesome - Name change to fontawesome4-fonts - Convert License tags to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt to make web subpackage available in AppStream Resolves: RHEL-190850 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuilt to make web subpackage available in AppStream Resolves: RHEL-190850 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a memory leak and potentially uninitialized values. Resolves: RHEL-41007, RHEL-41008 - Bump release for June 2024 mass rebuild - Delete .uuid with fc-cache -f. Resolves: rhbz#1761885 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release. Resolves: rhbz#2255623 - Update 65-nonlatin.conf to 69-nonlatin.conf This basically provides substitutes for certain languages and is helpful to determine default behavior though, we have per-package config for similar purpose. Since 65 is mostly used for default fonts and this config prevents some behavior for packages named something coming later than "nonlatin" in the alphabetical order. So moving this to the safer priority. This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after updating their priorities from 65 to 66. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Drop 10-sub-pixel-rgb-for-kde.conf Resolves: rhbz#2212512 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a memory leak and potentially uninitialized values. Resolves: RHEL-41007, RHEL-41008 - Bump release for June 2024 mass rebuild - Delete .uuid with fc-cache -f. Resolves: rhbz#1761885 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release. Resolves: rhbz#2255623 - Update 65-nonlatin.conf to 69-nonlatin.conf This basically provides substitutes for certain languages and is helpful to determine default behavior though, we have per-package config for similar purpose. Since 65 is mostly used for default fonts and this config prevents some behavior for packages named something coming later than "nonlatin" in the alphabetical order. So moving this to the safer priority. This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after updating their priorities from 65 to 66. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Drop 10-sub-pixel-rgb-for-kde.conf Resolves: rhbz#2212512 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add exact binary name in the file list. - Do not package backup files. Resolves: RHEL-54049 - Add %{epoch} in Requires line if needed - Support fontpkgheader macro for meta packages. - Drop YAML support in gen-fontconf for RHEL10 or later. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild with new foomatic-db - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - URL changed to github - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - RHEL-35698 add plans and gating - RHEL-35698 Remove/migrate additional license tags to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to foomatic-db-4.0-20230810 - fix xargs in %prep to work with files with spaces - fix rpm warnings about patch macros - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - RHEL-35698 add plans and gating - RHEL-35698 Remove/migrate additional license tags to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to foomatic-db-4.0-20230810 - fix xargs in %prep to work with files with spaces - fix rpm warnings about patch macros - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - RHEL-35698 add plans and gating - RHEL-35698 Remove/migrate additional license tags to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to foomatic-db-4.0-20230810 - fix xargs in %prep to work with files with spaces - fix rpm warnings about patch macros - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add empty rules list to gating.yaml - Modify gating.yaml file based on gating feedback - Even more modifications to the gating control files Related: RHEL-60802 - Modifications to the gating control files Resolves: RHEL-60802 - Add gating control files Resolves: RHEL-60802 - Upgrade to 0.4.0 Resolves: RHEL-60802 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Patch for CVE-2024-24258 and CVE-2024-24259 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Patch for CVE-2024-24258 and CVE-2024-24259 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.6.17 - .fmf/version: Add fmf metadtata root - gating: RHEL-10: Add OSCI testing - Bump release for October 2024 mass rebuild: - Related: RHELMISC-3914 - add gating.yaml file - Bump release for June 2024 mass rebuild - Update to 1.6.18 - Update to 1.6.17 - .fmf/version: Add fmf metadtata root - gating: RHEL-10: Add OSCI testing - Bump release for October 2024 mass rebuild: - Related: RHELMISC-3914 - add gating.yaml file - Bump release for June 2024 mass rebuild - Update to 1.6.17 - .fmf/version: Add fmf metadtata root - gating: RHEL-10: Add OSCI testing - Bump release for October 2024 mass rebuild: - Related: RHELMISC-3914 - add gating.yaml file - Bump release for June 2024 mass rebuild - Update to 1.6.18 - Update to 1.6.17 - .fmf/version: Add fmf metadtata root - gating: RHEL-10: Add OSCI testing - Bump release for October 2024 mass rebuild: - Related: RHELMISC-3914 - add gating.yaml file - Bump release for June 2024 mass rebuild - Update to 1.6.17 - .fmf/version: Add fmf metadtata root - gating: RHEL-10: Add OSCI testing - Bump release for October 2024 mass rebuild: - Related: RHELMISC-3914 - add gating.yaml file - Bump release for June 2024 mass rebuild - Update to 1.6.18 - Update to 1.6.17 - .fmf/version: Add fmf metadtata root - gating: RHEL-10: Add OSCI testing - Bump release for October 2024 mass rebuild: - Related: RHELMISC-3914 - add gating.yaml file - Bump release for June 2024 mass rebuild - Update to 1.6.17 - .fmf/version: Add fmf metadtata root - gating: RHEL-10: Add OSCI testing - Bump release for October 2024 mass rebuild: - Related: RHELMISC-3914 - add gating.yaml file - Bump release for June 2024 mass rebuild - Update to 1.6.18 - Update to 1.6.17 - .fmf/version: Add fmf metadtata root - gating: RHEL-10: Add OSCI testing - Bump release for October 2024 mass rebuild: - Related: RHELMISC-3914 - add gating.yaml file - Bump release for June 2024 mass rebuild - Disable JIT if PCRE can't allocate executable memory - Fix warnings from service file Resolves: RHEL-116594 - Rebase to release 3.2.8 Resolves: RHEL-107671 - Rebuild for OpenSSL 3.5 Resolves: RHEL-88054 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Disable unsupported Perl script - Rebase to release 3.2.5 Resolves: RHEL-46784 - Bump release for June 2024 mass rebuild - Remove SQL helper script from package Resolves: RHEL-31745 - Remove Antora docs from package Resolves: RHEL-31184 - Disable JIT if PCRE can't allocate executable memory - Fix warnings from service file Resolves: RHEL-116594 - Rebase to release 3.2.8 Resolves: RHEL-107671 - Rebuild for OpenSSL 3.5 Resolves: RHEL-88054 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Disable unsupported Perl script - Rebase to release 3.2.5 Resolves: RHEL-46784 - Bump release for June 2024 mass rebuild - Remove SQL helper script from package Resolves: RHEL-31745 - Remove Antora docs from package Resolves: RHEL-31184 - Disable JIT if PCRE can't allocate executable memory - Fix warnings from service file Resolves: RHEL-116594 - Rebase to release 3.2.8 Resolves: RHEL-107671 - Rebuild for OpenSSL 3.5 Resolves: RHEL-88054 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Disable unsupported Perl script - Rebase to release 3.2.5 Resolves: RHEL-46784 - Bump release for June 2024 mass rebuild - Remove SQL helper script from package Resolves: RHEL-31745 - Remove Antora docs from package Resolves: RHEL-31184 - Disable JIT if PCRE can't allocate executable memory - Fix warnings from service file Resolves: RHEL-116594 - Rebase to release 3.2.8 Resolves: RHEL-107671 - Rebuild for OpenSSL 3.5 Resolves: RHEL-88054 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Disable unsupported Perl script - Rebase to release 3.2.5 Resolves: RHEL-46784 - Bump release for June 2024 mass rebuild - Remove SQL helper script from package Resolves: RHEL-31745 - Remove Antora docs from package Resolves: RHEL-31184 - Disable JIT if PCRE can't allocate executable memory - Fix warnings from service file Resolves: RHEL-116594 - Rebase to release 3.2.8 Resolves: RHEL-107671 - Rebuild for OpenSSL 3.5 Resolves: RHEL-88054 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Disable unsupported Perl script - Rebase to release 3.2.5 Resolves: RHEL-46784 - Bump release for June 2024 mass rebuild - Remove SQL helper script from package Resolves: RHEL-31745 - Remove Antora docs from package Resolves: RHEL-31184 - Disable JIT if PCRE can't allocate executable memory - Fix warnings from service file Resolves: RHEL-116594 - Rebase to release 3.2.8 Resolves: RHEL-107671 - Rebuild for OpenSSL 3.5 Resolves: RHEL-88054 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Disable unsupported Perl script - Rebase to release 3.2.5 Resolves: RHEL-46784 - Bump release for June 2024 mass rebuild - Remove SQL helper script from package Resolves: RHEL-31745 - Remove Antora docs from package Resolves: RHEL-31184 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247346 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Abort after PROTOCOL_FAILED_NEGO (CVE-2026-91949) Resolves: RHEL-264913 - Fix several regressions in CVE-2026-73241 Resolves: RHEL-257781 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247346 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Backport several CVE fixes (CVE-2026-85089, CVE-2026-91946, CVE-2026-91947, CVE-2026-91950, CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91960, CVE-2026-91963, CVE-2026-91964) Resolves: RHEL-253892, RHEL-260716, RHEL-260750, RHEL-260763, RHEL-260778 Resolves: RHEL-260794, RHEL-260807, RHEL-260842, RHEL-260856, RHEL-260891 Resolves: RHEL-260912 - Abort after PROTOCOL_FAILED_NEGO (CVE-2026-91949) Resolves: RHEL-264913 - Fix several regressions in CVE-2026-73241 Resolves: RHEL-257781 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247346 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Backport several CVE fixes Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971 Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900 Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980 - Backport several CVE fixes Resolves: RHEL-151976, RHEL-152203 - Backport several CVE fixes Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894 - Backport several CVE fixes Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350 Resolves: RHEL-142334, RHEL-142318 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Backport several CVE fixes Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971 Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900 Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980 - Backport several CVE fixes Resolves: RHEL-151976, RHEL-152203 - Backport several CVE fixes Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Backport several CVE fixes Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971 Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900 Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980 - Backport several CVE fixes Resolves: RHEL-151976, RHEL-152203 - Backport several CVE fixes Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350 Resolves: RHEL-142334, RHEL-142318 - Try next DNS entry on connect failure Resolves: RHEL-140099 - Fix broken SSL checks and disable runtime checks (RHEL-73724) - Silence abidiff - Resolves: RHEL-86251 - Limit threadpool to 16 threads - Resolves: RHEL-86251 - Initialize function pointers after resource allocation - Fixes CVE-2025-4478 - Resolves: RHEL-91583 - Update to 3.10.3 - Update to 3.9.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.8.0 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247346 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Abort after PROTOCOL_FAILED_NEGO (CVE-2026-91949) Resolves: RHEL-264913 - Fix several regressions in CVE-2026-73241 Resolves: RHEL-257781 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247346 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Backport several CVE fixes (CVE-2026-85089, CVE-2026-91946, CVE-2026-91947, CVE-2026-91950, CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91960, CVE-2026-91963, CVE-2026-91964) Resolves: RHEL-253892, RHEL-260716, RHEL-260750, RHEL-260763, RHEL-260778 Resolves: RHEL-260794, RHEL-260807, RHEL-260842, RHEL-260856, RHEL-260891 Resolves: RHEL-260912 - Abort after PROTOCOL_FAILED_NEGO (CVE-2026-91949) Resolves: RHEL-264913 - Fix several regressions in CVE-2026-73241 Resolves: RHEL-257781 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247346 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Backport several CVE fixes Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971 Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900 Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980 - Backport several CVE fixes Resolves: RHEL-151976, RHEL-152203 - Backport several CVE fixes Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894 - Backport several CVE fixes Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350 Resolves: RHEL-142334, RHEL-142318 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Backport several CVE fixes Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971 Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900 Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980 - Backport several CVE fixes Resolves: RHEL-151976, RHEL-152203 - Backport several CVE fixes Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Backport several CVE fixes Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971 Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900 Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980 - Backport several CVE fixes Resolves: RHEL-151976, RHEL-152203 - Backport several CVE fixes Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350 Resolves: RHEL-142334, RHEL-142318 - Try next DNS entry on connect failure Resolves: RHEL-140099 - Fix broken SSL checks and disable runtime checks (RHEL-73724) - Silence abidiff - Resolves: RHEL-86251 - Limit threadpool to 16 threads - Resolves: RHEL-86251 - Initialize function pointers after resource allocation - Fixes CVE-2025-4478 - Resolves: RHEL-91583 - Update to 3.10.3 - Update to 3.9.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.8.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix SAST Automation findings - Resolves: RHEL-44737 - Bump release for June 2024 mass rebuild - Migrated to SPDX license - Remove a patch which causes FTBFS - Resolves: #2261113 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.13.2 - Resolves: #2217137 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.13.1 - Resolves: #2217137 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - New upstream release. - Fix broken data in fribidi. Resolves: RHEL-36581 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - New upstream release. Resolves: rhbz#2207796 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - New upstream release. - Fix broken data in fribidi. Resolves: RHEL-36581 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - New upstream release. Resolves: rhbz#2207796 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: RHEL-128146 - Files under /var are not properly created in image-mode - Resolves: RHEL-118620 - Rebase FRR in to version 10.4.1 - Resolves: RHEL-107464 - bgp session not recovered due to incorect error no AF activated for peer - RHEL-78638 - frr-reload.py suffers from unescaped regex sequences - Resolves: RHEL-67011 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-78324 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-54674 - Function bgpd/bgp_attr.c does not check the actual remaining stream length - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-59899 - Replace NetworkManager patch in the current version - Resolves: RHEL-56074 - frr AVCs after rebase to 10.1 - Resolves: RHEL-178134 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-128146 - Files under /var are not properly created in image-mode - Resolves: RHEL-118620 - Rebase FRR in to version 10.4.1 - Resolves: RHEL-107464 - bgp session not recovered due to incorect error no AF activated for peer - RHEL-78638 - frr-reload.py suffers from unescaped regex sequences - Resolves: RHEL-67011 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-78324 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-54674 - Function bgpd/bgp_attr.c does not check the actual remaining stream length - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-59899 - Replace NetworkManager patch in the current version - Resolves: RHEL-128146 - Files under /var are not properly created in image-mode - Resolves: RHEL-118620 - Rebase FRR in to version 10.4.1 - Resolves: RHEL-107464 - bgp session not recovered due to incorect error no AF activated for peer - RHEL-78638 - frr-reload.py suffers from unescaped regex sequences - Resolves: RHEL-67011 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-78324 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-54674 - Function bgpd/bgp_attr.c does not check the actual remaining stream length - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-59899 - Replace NetworkManager patch in the current version - Resolves: RHEL-56074 - frr AVCs after rebase to 10.1 - Resolves: RHEL-178134 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-128146 - Files under /var are not properly created in image-mode - Resolves: RHEL-118620 - Rebase FRR in to version 10.4.1 - Resolves: RHEL-107464 - bgp session not recovered due to incorect error no AF activated for peer - RHEL-78638 - frr-reload.py suffers from unescaped regex sequences - Resolves: RHEL-67011 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-78324 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-54674 - Function bgpd/bgp_attr.c does not check the actual remaining stream length - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-59899 - Replace NetworkManager patch in the current version - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Expand licenses to SPDX identifiers - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.16 - fixes "Update fuse-overlayfs to 1.16 [rhel-10.1.z]" - Resolves: RHEL-128522 - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.15 - Related: RHEL-80817 - Add riscv64 arch - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.14 - Related: RHEL-39410 - Bump release for June 2024 mass rebuild - Fix missing fuse_loop_cfg_destroy() - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to upstream version 3.16.2 - Convert License tag to SPDX format - Skip tarball signature verification in RHEL builds - update to 3.16.1 - Add tarball signature verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Force fuse3 and fuse3-libs versions to be identical https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/ - Bump release - Use the accidentally-dropped efi_os_dir - Ensure valgrind is disabled on arches without valgrind - Rebase to latest upstream version - Sync the content of main.fmf from rhel9 to rhel10 - Rebase to latest upstream version - Rebase to latest upstream version. - Set efi_os_dir to 'redhat', rather than using 'rhel' - Bump release for October 2024 mass rebuild: - Rebase to get hardware support for CERTPX-13842 - use /usr/sbin directory - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebased to 26.4.25 - Rebase to 26.4.24 - Rebase to 26.4.23 - Rebase to 26.4.22 - Add sysusers.d config file to allow rpm to create users/groups automatically - Rebase to 26.4.21 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 26.4.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Bump release for package rebuild - Rebased to 26.4.27 - Rebased to 26.4.26 - Rebased to 26.4.25 - Rebase to 26.4.24 - Rebase to 26.4.23 - Rebase to 26.4.22 - Add sysusers.d config file to allow rpm to create users/groups automatically - Rebase to 26.4.21 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 26.4.19 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild with enabled gating Resolves RHEL-52115 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release - 5.3.0 - libsigsegv should no longer be needed for the build Resolves rhbz#2247650 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - New upstream release - 5.2.2 - Disable the pma test for now (it breaks the build right now). Resolves rhbz#2124101 - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix use after free in io.c - Fix buffer overflow in extensions/readdir.c - Fix integer overflow in buildin.c Resolves: CVE-2026-40467 Resolves: CVE-2026-40468 Resolves: CVE-2026-40553 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Bump again for rebuild (RHEL-96490) - Bump for rebuild (RHEL-96490) - Compress man page and fix its name (RHEL-96490) - Fix typo in gcc-toolset-env (RHEL-94760) - Man page and documentation updates (RHEL-95996) - Support scl-style quoted invocation (RHEL-94760) - Split out scripts into a -runtime package on RHEL10 (RHEL-94841) - Fix quoting and other issues in gcc-toolset-env script (RHEL-94760) - New script to replace scl-enable (RHEL-88743). - Drop the sudo wrapper script. - Split out a devel package to break the dependency look with gts-gcc and gts-binutils. - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130615) - Remove uneeded glibc/powerpc patch. (RHEL-100160) - Rebuild with glibc fixed for CVE-2025-5702. (RHEL-100160) - Disable bootstrapping. (RHEL-94763) - Use the new gcc-toolset-15-runtime package. (RHEL-94763) - Add in the temporary fix for ppc64 gcc/glibc generating bad code. (RHEL-49348) - Avoid using SCL for c10s. - Switch back to using SCL macros. - Initial commit: Import Fedora 42 binutils to GTS-15. (RHELPLAN-172023) (RHEL-81745) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130615) - Remove uneeded glibc/powerpc patch. (RHEL-100160) - Rebuild with glibc fixed for CVE-2025-5702. (RHEL-100160) - Disable bootstrapping. (RHEL-94763) - Use the new gcc-toolset-15-runtime package. (RHEL-94763) - Add in the temporary fix for ppc64 gcc/glibc generating bad code. (RHEL-49348) - Avoid using SCL for c10s. - Switch back to using SCL macros. - Initial commit: Import Fedora 42 binutils to GTS-15. (RHELPLAN-172023) (RHEL-81745) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130615) - Remove uneeded glibc/powerpc patch. (RHEL-100160) - Rebuild with glibc fixed for CVE-2025-5702. (RHEL-100160) - Disable bootstrapping. (RHEL-94763) - Use the new gcc-toolset-15-runtime package. (RHEL-94763) - Add in the temporary fix for ppc64 gcc/glibc generating bad code. (RHEL-49348) - Avoid using SCL for c10s. - Switch back to using SCL macros. - Initial commit: Import Fedora 42 binutils to GTS-15. (RHELPLAN-172023) (RHEL-81745) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130615) - Remove uneeded glibc/powerpc patch. (RHEL-100160) - Rebuild with glibc fixed for CVE-2025-5702. (RHEL-100160) - Disable bootstrapping. (RHEL-94763) - Use the new gcc-toolset-15-runtime package. (RHEL-94763) - Add in the temporary fix for ppc64 gcc/glibc generating bad code. (RHEL-49348) - Avoid using SCL for c10s. - Switch back to using SCL macros. - Initial commit: Import Fedora 42 binutils to GTS-15. (RHELPLAN-172023) (RHEL-81745) - Bump again for rebuild (RHEL-96490) - Bump for rebuild (RHEL-96490) - Compress man page and fix its name (RHEL-96490) - Fix typo in gcc-toolset-env (RHEL-94760) - Man page and documentation updates (RHEL-95996) - Support scl-style quoted invocation (RHEL-94760) - Split out scripts into a -runtime package on RHEL10 (RHEL-94841) - Fix quoting and other issues in gcc-toolset-env script (RHEL-94760) - New script to replace scl-enable (RHEL-88743). - Drop the sudo wrapper script. - Split out a devel package to break the dependency look with gts-gcc and gts-binutils. - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix compilation on RISC-V - update from releases/gcc-15 branch (RHEL-116507) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113183) - Drop the workaround for CVE-2025-5702 (RHEL-100161) - Require gcc-toolset-N-runtime (RHEL-94672) - ship libstdc++.modules.json (RHEL-97043) - configure with --with-long-double-format=ieee (RHEL-97055) - Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84680) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95595) - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Bump again for rebuild (RHEL-96490) - Bump for rebuild (RHEL-96490) - Compress man page and fix its name (RHEL-96490) - Fix typo in gcc-toolset-env (RHEL-94760) - Man page and documentation updates (RHEL-95996) - Support scl-style quoted invocation (RHEL-94760) - Split out scripts into a -runtime package on RHEL10 (RHEL-94841) - Fix quoting and other issues in gcc-toolset-env script (RHEL-94760) - New script to replace scl-enable (RHEL-88743). - Drop the sudo wrapper script. - Split out a devel package to break the dependency look with gts-gcc and gts-binutils. - Use gnutls instead of gcrypt (RHEL-49434) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 4.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Use gnutls instead of gcrypt (RHEL-49434) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 4.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Use gnutls instead of gcrypt (RHEL-49434) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 4.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Explicitly BR pkgconfig(systemd); fixes RHBZ#2142295 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Explicitly BR pkgconfig(systemd); fixes RHBZ#2142295 - Rebuild for Konflux (Resolves: RHEL-84822) - Rebuild for Konflux - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump and rebuild package (for riscv64) - Rebuilt for libavif 1.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix LZW decompression in GIF handling (CVE-2026-9672) (Resolves: RHEL-259570) - Rebuild for Konflux (Resolves: RHEL-84822) - Rebuild for Konflux - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild for Konflux (Resolves: RHEL-84822) - Rebuild for Konflux - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump and rebuild package (for riscv64) - Rebuilt for libavif 1.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix LZW decompression in GIF handling (CVE-2026-9672) (Resolves: RHEL-259570) - Rebuild for Konflux (Resolves: RHEL-84822) - Rebuild for Konflux - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuilt for Python 3.14 - Fix *.py scripts packaging - Update to 3.10.3 - Enable blosc - Rebuild (poppler) - Add definitions of missing int16_t and int32_t - Rebuild for libarrow 19 in poppler's sidetag - Update to 3.10.2 - Rebuilt for libarrow 19 - Rebuild (poppler) - Rebuilt for Python 3.14 - Fix *.py scripts packaging - Update to 3.10.3 - Enable blosc - Rebuild (poppler) - Add definitions of missing int16_t and int32_t - Rebuild for libarrow 19 in poppler's sidetag - Update to 3.10.2 - Rebuilt for libarrow 19 - Rebuild (poppler) - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-150992) - Backport fixes to decoding AMD64 instructions Resolves: RHEL-93581 - Rebase RHEL10 GDB to 16.3 Resolves: RHEL-56897 Resolves: RHEL-91382 - Remove 32-bit ARM support for RHEL 10+. This is not a RHEL supported target, so lets drop this target. Retain for older RHEL versions, as well as Fedora. - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-150992) - Backport fixes to decoding AMD64 instructions Resolves: RHEL-93581 - Rebase RHEL10 GDB to 16.3 Resolves: RHEL-56897 Resolves: RHEL-91382 - Remove 32-bit ARM support for RHEL 10+. This is not a RHEL supported target, so lets drop this target. Retain for older RHEL versions, as well as Fedora. - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-150992) - Backport fixes to decoding AMD64 instructions Resolves: RHEL-93581 - Rebase RHEL10 GDB to 16.3 Resolves: RHEL-56897 Resolves: RHEL-91382 - Remove 32-bit ARM support for RHEL 10+. This is not a RHEL supported target, so lets drop this target. Retain for older RHEL versions, as well as Fedora. - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-150992) - Backport fixes to decoding AMD64 instructions Resolves: RHEL-93581 - Rebase RHEL10 GDB to 16.3 Resolves: RHEL-56897 Resolves: RHEL-91382 - Remove 32-bit ARM support for RHEL 10+. This is not a RHEL supported target, so lets drop this target. Retain for older RHEL versions, as well as Fedora. - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-150992) - Backport fixes to decoding AMD64 instructions Resolves: RHEL-93581 - Rebase RHEL10 GDB to 16.3 Resolves: RHEL-56897 Resolves: RHEL-91382 - Remove 32-bit ARM support for RHEL 10+. This is not a RHEL supported target, so lets drop this target. Retain for older RHEL versions, as well as Fedora. - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - jpeg: Reject unsupported number of components - jpeg: Be more careful with chunked icc data - Bump release for October 2024 mass rebuild: - Recommend webp loader only on Fedora - Update to 2.42.12 and sync with Fedora - Bump release for June 2024 mass rebuild - jpeg: Reject unsupported number of components - jpeg: Be more careful with chunked icc data - Bump release for October 2024 mass rebuild: - Recommend webp loader only on Fedora - Update to 2.42.12 and sync with Fedora - Bump release for June 2024 mass rebuild - jpeg: Reject unsupported number of components - jpeg: Be more careful with chunked icc data - Bump release for October 2024 mass rebuild: - Recommend webp loader only on Fedora - Update to 2.42.12 and sync with Fedora - Bump release for June 2024 mass rebuild - Check for "boot_vga" when creating the display - Fix reporting false failed authentication - Update debug_json_requests with extra optimization - Backport GDM passwordless feature - Keep register display method - Fix recording wtmp/utmp/btmp - Improve plymouth handling - Add starting headless sessions with C tool - Quit plymouth when no local display is available - Fix launching headless service on boot - Fix gdm-x-session parameter, now it uses "--handle-registration" - Update how GDM handles Registering session/display to properly - Check for "boot_vga" when creating the display - Fix reporting false failed authentication - Update debug_json_requests with extra optimization - Backport GDM passwordless feature - Keep register display method - Fix recording wtmp/utmp/btmp - Improve plymouth handling - Add starting headless sessions with C tool - Fix auth bypass in authselect pam substacks - Fix gdm-x-session parameter, now it uses "--handle-registration" - Update how GDM handles Registering session/display to properly - Check for "boot_vga" when creating the display - Fix reporting false failed authentication - Update debug_json_requests with extra optimization - Backport GDM passwordless feature - Keep register display method - Fix recording wtmp/utmp/btmp - Improve plymouth handling - Fix crash in session-settings related with ActUser - Update unified authentication patch to drop passkey/web auth settings - Fix auth bypass in authselect pam substacks - Resolves: https://redhat.atlassian.net/browse/RHEL-178665 - Update how GDM handles Registering session/display to properly - Check for "boot_vga" when creating the display - Fix reporting false failed authentication - Update debug_json_requests with extra optimization - Backport GDM passwordless feature - Keep register display method - Update to 2.7.2 + Backport fixes from upstream to use BeaconDB + Use BeaconDB for the default location services source Resolves: RHEL-79063 - Resolves: RHEL-44940 (Remove Mozilla Location Service) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format). - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.7.0 - Switch to libsoup 3 - Update to 2.7.2 + Backport fixes from upstream to use BeaconDB + Use BeaconDB for the default location services source Resolves: RHEL-79063 - Resolves: RHEL-44940 (Remove Mozilla Location Service) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format). - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.7.0 - Switch to libsoup 3 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - enable gating - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license - Add provides for geocode-glib2 - Rename geocode-glib2 back to geocode-glib - Remove the libsoup 2 build - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use SPDX-format license tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use SPDX-format license tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 3.13.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.13.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 3.12.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.12.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 3.12.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - CI gating tests migration to tmt - Add explicit package version requirement for libtextstyle - Bump release for June 2024 mass rebuild - condition libtextstyle obsoletes - update to 0.22.5 release - https://savannah.gnu.org/news/?id=10597 - Add back libtextstyle library for rawhide (#2264128) - update to 0.22.4 release - https://savannah.gnu.org/news/?id=10544 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - CI gating tests migration to tmt - Add explicit package version requirement for libtextstyle - Bump release for June 2024 mass rebuild - condition libtextstyle obsoletes - update to 0.22.5 release - https://savannah.gnu.org/news/?id=10597 - Add back libtextstyle library for rawhide (#2264128) - update to 0.22.4 release - https://savannah.gnu.org/news/?id=10544 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc() - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter() - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - Bump release for June 2024 mass rebuild - RHEL-38835 run the package with correct tests - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc() - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter() - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - Bump release for June 2024 mass rebuild - RHEL-38835 run the package with correct tests - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc() - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter() - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - Bump release for June 2024 mass rebuild - RHEL-38835 run the package with correct tests - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc() - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter() - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - Bump release for June 2024 mass rebuild - RHEL-38835 run the package with correct tests - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebuild - fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154850) - fix giftext memmory access error (RHEL-77803) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157086) - rebuild - fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154850) - fix giftext memmory access error (RHEL-77803) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - RPMAUTOSPEC: unresolvable merge - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild with new Golang - Rebuild with new Golang - Rebuild with new Golang - Update to 3.7.1 - Use constant format string - Rebuild with new Golang - Update to 3.6.1 - Update to 3.6.0 - Bump release for October 2024 mass rebuild: - Rebuild with new Golang - Fix CVE-2026-39821 in vendored golang.org/x/net idna package - Rebuild with new Golang - Rebuild with new Golang - Rebuild with new Golang - Update to 3.7.1 - Use constant format string - Rebuild with new Golang - Update to 3.6.1 - Update to 3.6.0 - Bump release for October 2024 mass rebuild: - Rebuild with new Golang - Fix CVE-2026-39821 in vendored golang.org/x/net idna package - Rebuild with new Golang - Rebuild with new Golang - Rebuild with new Golang - Update to 3.7.1 - Use constant format string - Rebuild with new Golang - Update to 3.6.1 - Update to 3.6.0 - Rebuild with new Golang - Rebuild with new Golang - Fix CVE-2026-39821 in vendored golang.org/x/net idna package - Rebuild with new Golang - Rebuild with new Golang - Rebuild with new Golang - Update to 3.7.1 - Use constant format string - Rebuild with new Golang - Update to 3.6.1 - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Actually apply test patch Related: Resolves: RHEL-58016 - Update mozjs to 115.15.0 Resolves: RHEL-58016 - Replace xvfb dependency Resolves: RHEL-36637 - Bump bundled mozjs version Resolves: RHEL-45601 - Re-enable LTO for all archs Resolves: RHEL-40915 - Bump release for June 2024 mass rebuild - Adjust rpminspect configuration - Bundle mozjs on RHEL - Fix SPDX license information - Add rpminspect configuration - Update to 1.80.2 - Fix CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 and patches for GUnixMount issues - Allow to get startup notify ID without GAppInfo - Backport patch to prevent sending a serial of zero on overflow - Sync the content of main.fmf from rhel9 to rhel10 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Add new systemtap-sdt-dtrace to build deps - Add patch to fix test failure with newer tzdata - metadata preparation for RHIVOS RHELMISC-7537 - Bump release for October 2024 mass rebuild: - Fix CVE-2026-58016: D-Bus introspection XML node nesting validation - Fix CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 and patches for GUnixMount issues - Allow to get startup notify ID without GAppInfo - Backport patch to prevent sending a serial of zero on overflow - Sync the content of main.fmf from rhel9 to rhel10 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Add new systemtap-sdt-dtrace to build deps - Add patch to fix test failure with newer tzdata - metadata preparation for RHIVOS RHELMISC-7537 - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Fix CVE-2026-58013: GIOChannel memcmp buffer over-read - Fix CVE-2026-58016: D-Bus introspection XML node nesting validation - Fix CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 and patches for GUnixMount issues - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Fix CVE-2026-58013: GIOChannel memcmp buffer over-read - Fix CVE-2026-58016: D-Bus introspection XML node nesting validation - Fix CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 and patches for GUnixMount issues - Allow to get startup notify ID without GAppInfo - Backport patch to prevent sending a serial of zero on overflow - Sync the content of main.fmf from rhel9 to rhel10 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Add new systemtap-sdt-dtrace to build deps - Add patch to fix test failure with newer tzdata - metadata preparation for RHIVOS RHELMISC-7537 - Bump release for October 2024 mass rebuild: - Fix CVE-2026-58016: D-Bus introspection XML node nesting validation - Fix CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 and patches for GUnixMount issues - Allow to get startup notify ID without GAppInfo - Backport patch to prevent sending a serial of zero on overflow - Sync the content of main.fmf from rhel9 to rhel10 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Add new systemtap-sdt-dtrace to build deps - Add patch to fix test failure with newer tzdata - metadata preparation for RHIVOS RHELMISC-7537 - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Fix CVE-2026-58013: GIOChannel memcmp buffer over-read - Fix CVE-2026-58016: D-Bus introspection XML node nesting validation - Fix CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 and patches for GUnixMount issues - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Fix CVE-2026-58013: GIOChannel memcmp buffer over-read - Fix CVE-2026-58016: D-Bus introspection XML node nesting validation - Fix CVE-2025-14087 and CVE-2025-14512 - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428) - Remove unneeded ld-linux .debug files (RHEL-136312) - Fix race condition in io/tst-stat (RHEL-151711) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142193) - Update locales for Croatia to use EUR as currency symbol (RHEL-140103) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428) - Remove unneeded ld-linux .debug files (RHEL-136312) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - x86-64: Prefer EVEX512 string and memory functions on AMD Zen5 (RHEL-174869) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694) - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing (RHEL-180652, RHEL-185612) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654) - x86-64: Prefer EVEX512 string and memory functions on AMD Zen5 (RHEL-174869) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694) - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-19499: Buffer overflow in strfmon right-justification padding (RHEL-248034) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247957) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253648) - Fail the build if there are unexpected test failures (RHEL-252942) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238485) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238479) - Minor documentation improvements (RHEL-158699) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-180800) - Fix changelog entries (RHEL-33536, RHEL-167871) - Port resolver tests to native resolv framework (RHEL-33536) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-8674: Denial of Service via long DNS search domain (RHEL-264714) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248057) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249634) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251518) - CVE-2026-19499: Buffer overflow in strfmon right-justification padding (RHEL-248034) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247957) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253648) - Fail the build if there are unexpected test failures (RHEL-252942) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238485) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238479) - Minor documentation improvements (RHEL-158699) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428) - Remove unneeded ld-linux .debug files (RHEL-136312) - Fix race condition in io/tst-stat (RHEL-151711) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142193) - Update locales for Croatia to use EUR as currency symbol (RHEL-140103) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428) - Remove unneeded ld-linux .debug files (RHEL-136312) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - x86-64: Prefer EVEX512 string and memory functions on AMD Zen5 (RHEL-174869) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694) - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing (RHEL-180652, RHEL-185612) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654) - x86-64: Prefer EVEX512 string and memory functions on AMD Zen5 (RHEL-174869) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694) - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-19499: Buffer overflow in strfmon right-justification padding (RHEL-248034) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247957) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253648) - Fail the build if there are unexpected test failures (RHEL-252942) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238485) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238479) - Minor documentation improvements (RHEL-158699) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-180800) - Fix changelog entries (RHEL-33536, RHEL-167871) - Port resolver tests to native resolv framework (RHEL-33536) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-8674: Denial of Service via long DNS search domain (RHEL-264714) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248057) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249634) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251518) - CVE-2026-19499: Buffer overflow in strfmon right-justification padding (RHEL-248034) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247957) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253648) - Fail the build if there are unexpected test failures (RHEL-252942) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238485) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238479) - Minor documentation improvements (RHEL-158699) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428) - Remove unneeded ld-linux .debug files (RHEL-136312) - Fix race condition in io/tst-stat (RHEL-151711) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142193) - Update locales for Croatia to use EUR as currency symbol (RHEL-140103) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428) - Remove unneeded ld-linux .debug files (RHEL-136312) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - x86-64: Prefer EVEX512 string and memory functions on AMD Zen5 (RHEL-174869) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694) - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing (RHEL-180652, RHEL-185612) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654) - x86-64: Prefer EVEX512 string and memory functions on AMD Zen5 (RHEL-174869) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694) - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-19499: Buffer overflow in strfmon right-justification padding (RHEL-248034) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247957) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253648) - Fail the build if there are unexpected test failures (RHEL-252942) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238485) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238479) - Minor documentation improvements (RHEL-158699) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-180800) - Fix changelog entries (RHEL-33536, RHEL-167871) - Port resolver tests to native resolv framework (RHEL-33536) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-8674: Denial of Service via long DNS search domain (RHEL-264714) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248057) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249634) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251518) - CVE-2026-19499: Buffer overflow in strfmon right-justification padding (RHEL-248034) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247957) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253648) - Fail the build if there are unexpected test failures (RHEL-252942) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238485) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238479) - Minor documentation improvements (RHEL-158699) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428) - Remove unneeded ld-linux .debug files (RHEL-136312) - Fix race condition in io/tst-stat (RHEL-151711) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142193) - Update locales for Croatia to use EUR as currency symbol (RHEL-140103) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428) - Remove unneeded ld-linux .debug files (RHEL-136312) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - x86-64: Prefer EVEX512 string and memory functions on AMD Zen5 (RHEL-174869) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694) - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Fix NULL pointer dereference in __nss_database_get and __nss_configure_lookup (RHEL-150270) - patch-git: Avoid trailing tabs in changelog (RHEL-140226) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing (RHEL-180652, RHEL-185612) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654) - x86-64: Prefer EVEX512 string and memory functions on AMD Zen5 (RHEL-174869) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694) - Add LD_DEBUG=tls for tracking thread-local storage and TCB management (RHEL-159427) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162885) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-149709) - Avoid duplicate DNS queries when search path contains "." (RHEL-142675) - Sync with upstream branch release/2.39/master (RHEL-151554) - Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa - resolv: Check hostname for validity (CVE-2026-4438) - resolv: Count records correctly (CVE-2026-4437) - iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-19499: Buffer overflow in strfmon right-justification padding (RHEL-248034) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247957) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253648) - Fail the build if there are unexpected test failures (RHEL-252942) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238485) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238479) - Minor documentation improvements (RHEL-158699) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-180800) - Fix changelog entries (RHEL-33536, RHEL-167871) - Port resolver tests to native resolv framework (RHEL-33536) - Overwrite target for x86_64_v2 - Update patch-git.lua to handle AlmaLinux branches correctly - Add support for AlmaLinux import UBI format - CVE-2026-8674: Denial of Service via long DNS search domain (RHEL-264714) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248057) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249634) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251518) - CVE-2026-19499: Buffer overflow in strfmon right-justification padding (RHEL-248034) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247957) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253648) - Fail the build if there are unexpected test failures (RHEL-252942) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238485) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238479) - Minor documentation improvements (RHEL-158699) - Bump release for October 2024 mass rebuild: - Require libsigc++30 and not 20 - Bump release for June 2024 mass rebuild - gating enabled - Update to 2.78.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.78.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.77.0 - Update to 1.4.328.1 SDK - Update to SDK v1.4.313 - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - License: AND must be all capital letters - Update license identifiers - Update to 1.3.283.0 SDK - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.4.328.1 SDK - Update to SDK v1.4.313.0 - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Update to 1.3.280.0 SDK - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Split xdriinfo into its own package - Remove xdriinfo additional source build and autotools dependencies - SPDX migration: license is already SPDX compatible - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Install all necessary shader files (#1373299) - Update to 9.0.0 - Enable vulkan demos - Update to 8.5.0 - Change build system to meson - Release bump due to internal issue with the build system (missing debug symbols) Related: RHEL-24118 - Port the ibm z13 optimization patches Resolves: RHEL-24118 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Release bump due to internal issue with the build system (missing debug symbols) Related: RHEL-24118 - Port the ibm z13 optimization patches Resolves: RHEL-24118 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.4.5 - Bump release for June 2024 mass rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 0.4.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 47.1 Resolves: RHEL-62344 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 46.beta - Update to 42.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 42.7 - Update to 42.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 47.1 Resolves: RHEL-62344 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 46.beta - Update to 42.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 42.7 - Update to 42.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 46.3. Resolves: RHEL-89562 - Update to 46.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 46.alpha - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.0.2 - Update to 45.0.1 - Update to 45.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 46.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.0 - Add patch to fix gjs crash - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 45.alpha - Update to 44.0 (#2179673) - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Update to 46.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 44.0 - Update to 44.rc - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Make requests for passwords more general - Resolves: RHEL-80675 - Add shortcuts window - Resolves: RHEL-81195 - Update to 47.2.1 - Resolves: RHEL-72789, RHEL-36611 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 47.0 - Resolves: RHEL-64695 - Bump release for June 2024 mass rebuild - Fix a crash during disconnection - Resolves: RHEL-30212 - Update to 46.0 - Use FreeRDP 3 - Add HDR switch in display panel - Allow setting primary sim slot in Mobile Networks (WWAN) settings - Add compatibility patches with mutter/shell 49 - Announce password change states to screen reader - Add rpminspect ignore list - a11y: Add "Text Size" setting - Update to 47.7 - Add "Minimize and Maximize" window control settings - Add Access Point "Attach" setting to wwan connections - Update to 47.6 - Ensure newly created users have an avatar - Add HDR switch in display panel - Allow setting primary sim slot in Mobile Networks (WWAN) settings - Add compatibility patches with mutter/shell 49 - Announce password change states to screen reader - Add rpminspect ignore list - a11y: Add "Text Size" setting - Update to 47.7 - Add "Minimize and Maximize" window control settings - Add Access Point "Attach" setting to wwan connections - Add HDR switch in display panel - Allow setting primary sim slot in Mobile Networks (WWAN) settings - Add compatibility patches with mutter/shell 49 - Announce password change states to screen reader - Add rpminspect ignore list - a11y: Add "Text Size" setting - Update to 47.7 - Add "Minimize and Maximize" window control settings - Add Access Point "Attach" setting to wwan connections - Update to 47.6 - Ensure newly created users have an avatar - Add HDR switch in display panel - Allow setting primary sim slot in Mobile Networks (WWAN) settings - Add compatibility patches with mutter/shell 49 - Announce password change states to screen reader - Add rpminspect ignore list - a11y: Add "Text Size" setting - Update to 47.7 - Add "Minimize and Maximize" window control settings - Add Access Point "Attach" setting to wwan connections - tests submodule needs explicit Requires - Add gnome-qr library used by passwordless GDM - Update to 44.1 - Drop live user mode patchset - Bump release for October 2024 mass rebuild: - Convert subpackages to SPDX license format - Fix license tag so its validated by license-validate - Add gating.yaml via API - Bump release for June 2024 mass rebuild - License migrated to SPDX format - Sync gnome-qr library patch series with upstream MR - Get qrcodegen tar file from lookaside cache - tests submodule needs explicit Requires - Add gnome-qr library used by passwordless GDM - Update to 44.1 - Drop live user mode patchset - Bump release for October 2024 mass rebuild: - Convert subpackages to SPDX license format - Fix license tag so its validated by license-validate - Add gating.yaml via API - tests submodule needs explicit Requires - Add gnome-qr library used by passwordless GDM - Update to 44.1 - Drop live user mode patchset - Bump release for October 2024 mass rebuild: - Convert subpackages to SPDX license format - Fix license tag so its validated by license-validate - Add gating.yaml via API - Bump release for June 2024 mass rebuild - License migrated to SPDX format - Sync gnome-qr library patch series with upstream MR - Get qrcodegen tar file from lookaside cache - tests submodule needs explicit Requires - Add gnome-qr library used by passwordless GDM - Update to 44.1 - Drop live user mode patchset - Bump release for October 2024 mass rebuild: - Convert subpackages to SPDX license format - Fix license tag so its validated by license-validate - Add gating.yaml via API - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 46.alpha - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.1 - Update to 45.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 44.0 - Update to 44.rc - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Update to 46.2 - Update to 46.1 - Backport F40 changes - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 46.alpha - Update to 45.0 - Update to 46.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix C89 compatibility issue - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 45.alpha - Update to 44.0 - AlmaLinux changes: Don’t apply the RHEL patch on AlmaLinux - account: Don't draw the avatar button background - Use systemd sysusers config to create user and group - Update to 46.7 - Revert vendor.conf for webui deferral - Update file list for dropping of live user mode patch - Drop live user mode patch: Change was deferred to F41 - Adjust downstream patch - Bump release for October 2024 mass rebuild: - Use branded illustrations - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Fix C compatibility issue - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Re-enable ssh-agent support (#2250704) - ssh-agent: update build instructions to disable ssh component - Introduced conditional builds based on ssh component required or not - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Switch dependency from /usr/libexec/gcr-ssh-askpass to gcr3 - Resolves: rhbz#2188431 - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Fix C compatibility issue - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Re-enable ssh-agent support (#2250704) - ssh-agent: update build instructions to disable ssh component - Introduced conditional builds based on ssh component required or not - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Switch dependency from /usr/libexec/gcr-ssh-askpass to gcr3 - Resolves: rhbz#2188431 - Update to 49.0 - Add Xwayland and dbus-daemon as weak dependencies - Enable the screen reader for accessibility - Enable remote sessions via GDM login - Add window configurability - Fix crash on missing systemd files - search-app: Add systemd session files - Enable screenshots support - Copy and run the script from XDG_RUNTIME_DIR - Add dependency on flatpak - Update to 49.0 - Add Xwayland and dbus-daemon as weak dependencies - Enable the screen reader for accessibility - Enable remote sessions via GDM login - Add window configurability - Fix crash on missing systemd files - search-app: Add systemd session files - Enable screenshots support - Copy and run the script from XDG_RUNTIME_DIR - Add dependency on flatpak - Update to 49.0 - Add Xwayland and dbus-daemon as weak dependencies - Enable the screen reader for accessibility - Enable remote sessions via GDM login - Add window configurability - Fix crash on missing systemd files - search-app: Add systemd session files - Enable screenshots support - Copy and run the script from XDG_RUNTIME_DIR - Add dependency on flatpak - Fix Calculator to be presented - Papers should be in Utilities and not in Graphics and Office - Resolves: RHEL-65839 - Incorporate review feedback - Resolves: RHEL-65839 - Use autosetup - Rename 14.patch to gnome-menus-01.patch - Rearrange after design review - Resolves: RHEL-65839 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Resolves: RHEL-103392 (Update to 3.52.8) - Resolves: RHEL-74840 (Update to 3.52.3.1) - Resolves: RHEL-69591 (Update to 3.52.2) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-63179 (Update to 3.52.1) - Resolves: RHEL-60879 (Update to 3.52.0) - Resolves: RHEL-53973 (Update to 3.51.3) - Related: RHEL-45844 (Update to 3.51.0) - Resolves: RHEL-45186 (Fix issues found by Coverity Scan) - Bump release for June 2024 mass rebuild - Fix abort when disconnecting from libei - Fix restarting the daemon state after a client has disconnected Resolves: RHEL-89455 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add gating.yaml - Version 0.0.11 - Fix requires in Python package - Add libei support - Bug fixing - Update to 49.3 - Update to 49.2 - Add missing build time dependencies - Patch out multi touch support - Update to 49.1 - Switch to %autorelease - Backport connection throttling - Update to 47.3 - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Support remote login to sessions from gnome-headless-session@.service - Update version requirements after rebase to 49 - Update to 49.3 - Update to 49.2 - Add missing build time dependencies - Patch out multi touch support - Update to 49.1 - Switch to %autorelease - Backport connection throttling - Update to 47.3 - Backport connection throttling - Support remote login to sessions from gnome-headless-session@.service - Update version requirements after rebase to 49 - Update to 49.3 - Update to 49.2 - Add missing build time dependencies - Patch out multi touch support - Update to 49.1 - Switch to %autorelease - Backport connection throttling - Ignore gnome-shell as gnome-session client - Do not start gnome-settings-daemon subman plugin on CentOS - Silence noisy GL-check warnings - Fix systemd v257+ inhibitors - Reinstate Subscription Manager's autostart patch - Bump release for October 2024 mass rebuild: - Add Obsoletes for removed subpackages - Drop xsession subpackage - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Ignore gnome-shell as gnome-session client - Do not start gnome-settings-daemon subman plugin on CentOS - Silence noisy GL-check warnings - Fix systemd v257+ inhibitors - Reinstate Subscription Manager's autostart patch - Bump release for October 2024 mass rebuild: - Add Obsoletes for removed subpackages - Drop xsession subpackage - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Disable subman plugin - Consider special modules for smartcard detection - Backport more auto-brightness related fixes - Fix auto-brightness with gnome-shell 49.x - Use gnome-shell interface for brightness control - subman: Delay startup notification by 30 minutes - Add subscription manager plugin - Add g-s-d-server-defaults subpackage for "Server with GUI" overrides - Revert "Add downstream default suspend setting for servers" - Disambiguate mount points with same name on "Low Disk Space" notifications - Disable subman plugin - Consider special modules for smartcard detection - Backport more auto-brightness related fixes - Fix auto-brightness with gnome-shell 49.x - Use gnome-shell interface for brightness control - subman: Delay startup notification by 30 minutes - Add subscription manager plugin - Add g-s-d-server-defaults subpackage for "Server with GUI" overrides - Revert "Add downstream default suspend setting for servers" - Disambiguate mount points with same name on "Low Disk Space" notifications - Use AlmaLinux icon as activities button - Use unbranded illustrations - Fix Firefox desktop filename in favorites - Bump release - Update passwordless GDM implementation to match upstream - Update to 49.4 - Extend display time of messages interval - Allow preemptive answer for 3 secs before locking text entry - Update passwordless GDM patch series - Update styles for passwordless GDM - Add passwordless gdm patch series - Register session with GDM on startup - Use AlmaLinux icon as activities button - Use unbranded illustrations - Fix Firefox desktop filename in favorites - Update passwordless GDM work to be in sync with upstream MR - rpminspect: Use correct paths in runpath exception - Resolves: https://redhat.atlassian.net/browse/RHEL-178662 - triggering new build - Update fix of registering session - Ensure gdm hint text is cleraed - Update passwordless GDM implementation to match upstream - Update to 49.4 - Extend display time of messages interval - Use AlmaLinux icon as activities button - Use unbranded illustrations - Fix Firefox desktop filename in favorites - Backport final state of passwordless GDM - Update passwordless GDM work to be in sync with upstream MR - rpminspect: Use correct paths in runpath exception - Resolves: https://redhat.atlassian.net/browse/RHEL-178662 - triggering new build - Update fix of registering session - Ensure gdm hint text is cleraed - Update passwordless GDM implementation to match upstream - Update to 49.4 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - AlmaLinux changes: Debrand for AlmaLinux OS - apply AlmaLinux patch - Update to 49.0 - Use api version to require gnome-shell - Bump release for October 2024 mass rebuild: - Update to 47.0 - Update to 47.alpha - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Backport changes from F40 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Update to 102 - Update to 100 - Bump release for October 2024 mass rebuild: - Update to 99 - dash-to-dock 96 - Update to version 94 - Move pre-generated stylesheet to separate source - Ensure compatibility with 47.alpha - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Update to 70 Resolves: RHEL-127138 - Update to 65 Resolves: RHEL-80432 - Update to 64 Resolves: RHEL-65151 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 63 Resolves: RHEL-61623 - Bump release for June 2024 mass rebuild - rebuild without unused clutter dependency - update to 62 (#2272810) - update to 61 (#2271317) - apply upstream PR for GNOME Shell 46 support (#2267061) - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Adjust gesture-inhibitor for GNOME 49 - Update to 49.0 - Update to 47.6 - Make workspace names more prominent - Update to 47.5 - Trim heads-up display message read from file - Support setting heads-up-display message from file - Update to 47.4 - Fix regression in chrome tracking - Update to 47.3 - Resolves: RHEL-123944 (Carousel does not respect the "enable-animations" a11y setting) - Resolves: RHEL-84652 (Update to 47.5) - Resolves: RHEL-73685 (Update to 47.4) - Resolves: RHEL-69592 (Update to 47.2) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-62353 (Update to 47.1) - Resolves: RHEL-58962 (Rebase to 47.0) - Resolves: RHEL-52807 (Update to 46.4) - Resolves: RHEL-39680 (Re-enable build of the fedora-langpacks subpackage in RHEL) - Resolves: RHEL-45603 (Update to 46.3) - Resolves: RHEL-123944 (Carousel does not respect the "enable-animations" a11y setting) - Resolves: RHEL-84652 (Update to 47.5) - Resolves: RHEL-73685 (Update to 47.4) - Resolves: RHEL-69592 (Update to 47.2) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-62353 (Update to 47.1) - Resolves: RHEL-58962 (Rebase to 47.0) - Resolves: RHEL-52807 (Update to 46.4) - Resolves: RHEL-39680 (Re-enable build of the fedora-langpacks subpackage in RHEL) - Resolves: RHEL-45603 (Update to 46.3) - Update to 46.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 46.alpha - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.0.2 - Update to 45.0.1 - Update to 45.0 - Update to 45.beta - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Add fix for resource leak - Update to 47.4 - Update to 47.3 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Update to 46.3 - gating enabled - Update to 46.1 - backport changes from Fedora 40 - Rebuild for ICU 74 - Don’t apply the RHEL patch on AlmaLinux - Drop the mention of Help applications as Yelp is not part of RHEL 10 - Resolves: RHEL-65819 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update illustrations for the final version - Add RHEL illustrations and rebase to 46.0 - Bump release for June 2024 mass rebuild - Drop downstream patch that downgraded pretty_env_logger dep to 0.4 - Don't use both meson and cargo for building - Migrate to SPDX license - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 46.1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.1 - Update to 45.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 44.3 - Update to 44.1 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add a gating.yaml - Rebase to newer upstream version and remove a lot of downstream patches - Fix build with dnf5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Backport two patches from master to fix fwupd-efi - Richard's patch to drop -compat - Fix CVE-2026-24882 (tpm2daemon buffer overflow) - Fix CVE-2025-68973 (gpg.fail/memcpy) - Avoid weak dependencies - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - New upstream release (#2268461) - Set GPG_TTY in profile.d (#2264985) - Bump release for June 2024 mass rebuild - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - tests: make pqc-hybrid-kx.sh work when system time set beyond 2038 - Update gnutls-3.8.9-cli-earlydata.patch to the upstream version - Fix 3.8.13 CVEs and security issues, update Makefile.in - Fix CVE-2026-33846 - Fix CVE-2026-42009 - Fix CVE-2026-33845 - Fix CVE-2026-42010 - Fix CVE-2026-3833 - Fix CVE-2026-42011 - Fix CVE-2026-42012 - Fix CVE-2026-42013 - Fix CVE-2026-42014 - Fix CVE-2026-5260 - Fix CVE-2026-42015 - Fix CVE-2026-3832 - Fix CVE-2026-5419 - Fix upstream security issue #1808 - Fix upstream security issue #1810 - Fix upstream security issue #1813 - Fix upstream security issue #1818 - Fix upstream security issue #1818 - Fix upstream security issue #1819 - Fix upstream security issue #1822 - Fix upstream security issue #1841 - Fix upstream security issue #1823 - Fix upstream security issue #1817 - Fix upstream security issue #1820 - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - tests: make pqc-hybrid-kx.sh work when system time set beyond 2038 - mark ML-KEM FIPS-unapproved - Fix 3.8.13 CVEs and security issues, update Makefile.in - Fix CVE-2026-33846 - Fix CVE-2026-42009 - Fix CVE-2026-33845 - Fix CVE-2026-42010 - Fix CVE-2026-3833 - Fix CVE-2026-42011 - Fix CVE-2026-42012 - Fix CVE-2026-42013 - Fix CVE-2026-42014 - Fix CVE-2026-5260 - Fix CVE-2026-42015 - Fix CVE-2026-3832 - Fix CVE-2026-5419 - Fix upstream security issue #1808 - Fix upstream security issue #1810 - Fix upstream security issue #1813 - Fix upstream security issue #1818 - Fix upstream security issue #1818 - Fix upstream security issue #1819 - Fix upstream security issue #1822 - Fix upstream security issue #1841 - Fix upstream security issue #1823 - Fix upstream security issue #1817 - Fix upstream security issue #1820 - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - tests: make pqc-hybrid-kx.sh work when system time set beyond 2038 - Update gnutls-3.8.9-cli-earlydata.patch to the upstream version - Fix 3.8.13 CVEs and security issues, update Makefile.in - Fix CVE-2026-33846 - Fix CVE-2026-42009 - Fix CVE-2026-33845 - Fix CVE-2026-42010 - Fix CVE-2026-3833 - Fix CVE-2026-42011 - Fix CVE-2026-42012 - Fix CVE-2026-42013 - Fix CVE-2026-42014 - Fix CVE-2026-5260 - Fix CVE-2026-42015 - Fix CVE-2026-3832 - Fix CVE-2026-5419 - Fix upstream security issue #1808 - Fix upstream security issue #1810 - Fix upstream security issue #1813 - Fix upstream security issue #1818 - Fix upstream security issue #1818 - Fix upstream security issue #1819 - Fix upstream security issue #1822 - Fix upstream security issue #1841 - Fix upstream security issue #1823 - Fix upstream security issue #1817 - Fix upstream security issue #1820 - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - tests: make pqc-hybrid-kx.sh work when system time set beyond 2038 - mark ML-KEM FIPS-unapproved - Fix 3.8.13 CVEs and security issues, update Makefile.in - Fix CVE-2026-33846 - Fix CVE-2026-42009 - Fix CVE-2026-33845 - Fix CVE-2026-42010 - Fix CVE-2026-3833 - Fix CVE-2026-42011 - Fix CVE-2026-42012 - Fix CVE-2026-42013 - Fix CVE-2026-42014 - Fix CVE-2026-5260 - Fix CVE-2026-42015 - Fix CVE-2026-3832 - Fix CVE-2026-5419 - Fix upstream security issue #1808 - Fix upstream security issue #1810 - Fix upstream security issue #1813 - Fix upstream security issue #1818 - Fix upstream security issue #1818 - Fix upstream security issue #1819 - Fix upstream security issue #1822 - Fix upstream security issue #1841 - Fix upstream security issue #1823 - Fix upstream security issue #1817 - Fix upstream security issue #1820 - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - tests: make pqc-hybrid-kx.sh work when system time set beyond 2038 - Update gnutls-3.8.9-cli-earlydata.patch to the upstream version - Fix 3.8.13 CVEs and security issues, update Makefile.in - Fix CVE-2026-33846 - Fix CVE-2026-42009 - Fix CVE-2026-33845 - Fix CVE-2026-42010 - Fix CVE-2026-3833 - Fix CVE-2026-42011 - Fix CVE-2026-42012 - Fix CVE-2026-42013 - Fix CVE-2026-42014 - Fix CVE-2026-5260 - Fix CVE-2026-42015 - Fix CVE-2026-3832 - Fix CVE-2026-5419 - Fix upstream security issue #1808 - Fix upstream security issue #1810 - Fix upstream security issue #1813 - Fix upstream security issue #1818 - Fix upstream security issue #1818 - Fix upstream security issue #1819 - Fix upstream security issue #1822 - Fix upstream security issue #1841 - Fix upstream security issue #1823 - Fix upstream security issue #1817 - Fix upstream security issue #1820 - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - tests: make pqc-hybrid-kx.sh work when system time set beyond 2038 - mark ML-KEM FIPS-unapproved - Fix 3.8.13 CVEs and security issues, update Makefile.in - Fix CVE-2026-33846 - Fix CVE-2026-42009 - Fix CVE-2026-33845 - Fix CVE-2026-42010 - Fix CVE-2026-3833 - Fix CVE-2026-42011 - Fix CVE-2026-42012 - Fix CVE-2026-42013 - Fix CVE-2026-42014 - Fix CVE-2026-5260 - Fix CVE-2026-42015 - Fix CVE-2026-3832 - Fix CVE-2026-5419 - Fix upstream security issue #1808 - Fix upstream security issue #1810 - Fix upstream security issue #1813 - Fix upstream security issue #1818 - Fix upstream security issue #1818 - Fix upstream security issue #1819 - Fix upstream security issue #1822 - Fix upstream security issue #1841 - Fix upstream security issue #1823 - Fix upstream security issue #1817 - Fix upstream security issue #1820 - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - tests: make pqc-hybrid-kx.sh work when system time set beyond 2038 - Update gnutls-3.8.9-cli-earlydata.patch to the upstream version - Fix 3.8.13 CVEs and security issues, update Makefile.in - Fix CVE-2026-33846 - Fix CVE-2026-42009 - Fix CVE-2026-33845 - Fix CVE-2026-42010 - Fix CVE-2026-3833 - Fix CVE-2026-42011 - Fix CVE-2026-42012 - Fix CVE-2026-42013 - Fix CVE-2026-42014 - Fix CVE-2026-5260 - Fix CVE-2026-42015 - Fix CVE-2026-3832 - Fix CVE-2026-5419 - Fix upstream security issue #1808 - Fix upstream security issue #1810 - Fix upstream security issue #1813 - Fix upstream security issue #1818 - Fix upstream security issue #1818 - Fix upstream security issue #1819 - Fix upstream security issue #1822 - Fix upstream security issue #1841 - Fix upstream security issue #1823 - Fix upstream security issue #1817 - Fix upstream security issue #1820 - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - tests: make pqc-hybrid-kx.sh work when system time set beyond 2038 - mark ML-KEM FIPS-unapproved - Fix 3.8.13 CVEs and security issues, update Makefile.in - Fix CVE-2026-33846 - Fix CVE-2026-42009 - Fix CVE-2026-33845 - Fix CVE-2026-42010 - Fix CVE-2026-3833 - Fix CVE-2026-42011 - Fix CVE-2026-42012 - Fix CVE-2026-42013 - Fix CVE-2026-42014 - Fix CVE-2026-5260 - Fix CVE-2026-42015 - Fix CVE-2026-3832 - Fix CVE-2026-5419 - Fix upstream security issue #1808 - Fix upstream security issue #1810 - Fix upstream security issue #1813 - Fix upstream security issue #1818 - Fix upstream security issue #1818 - Fix upstream security issue #1819 - Fix upstream security issue #1822 - Fix upstream security issue #1841 - Fix upstream security issue #1823 - Fix upstream security issue #1817 - Fix upstream security issue #1820 - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - tests: make pqc-hybrid-kx.sh work when system time set beyond 2038 - Update gnutls-3.8.9-cli-earlydata.patch to the upstream version - Fix 3.8.13 CVEs and security issues, update Makefile.in - Fix CVE-2026-33846 - Fix CVE-2026-42009 - Fix CVE-2026-33845 - Fix CVE-2026-42010 - Fix CVE-2026-3833 - Fix CVE-2026-42011 - Fix CVE-2026-42012 - Fix CVE-2026-42013 - Fix CVE-2026-42014 - Fix CVE-2026-5260 - Fix CVE-2026-42015 - Fix CVE-2026-3832 - Fix CVE-2026-5419 - Fix upstream security issue #1808 - Fix upstream security issue #1810 - Fix upstream security issue #1813 - Fix upstream security issue #1818 - Fix upstream security issue #1818 - Fix upstream security issue #1819 - Fix upstream security issue #1822 - Fix upstream security issue #1841 - Fix upstream security issue #1823 - Fix upstream security issue #1817 - Fix upstream security issue #1820 - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - tests: make pqc-hybrid-kx.sh work when system time set beyond 2038 - mark ML-KEM FIPS-unapproved - Fix 3.8.13 CVEs and security issues, update Makefile.in - Fix CVE-2026-33846 - Fix CVE-2026-42009 - Fix CVE-2026-33845 - Fix CVE-2026-42010 - Fix CVE-2026-3833 - Fix CVE-2026-42011 - Fix CVE-2026-42012 - Fix CVE-2026-42013 - Fix CVE-2026-42014 - Fix CVE-2026-5260 - Fix CVE-2026-42015 - Fix CVE-2026-3832 - Fix CVE-2026-5419 - Fix upstream security issue #1808 - Fix upstream security issue #1810 - Fix upstream security issue #1813 - Fix upstream security issue #1818 - Fix upstream security issue #1818 - Fix upstream security issue #1819 - Fix upstream security issue #1822 - Fix upstream security issue #1841 - Fix upstream security issue #1823 - Fix upstream security issue #1817 - Fix upstream security issue #1820 - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches - key_update: rework the rekeying logic - Update to 3.8.10 upstream release - algorithms: assign hash strength to ML-DSA signature algorithms - nettle/pk: mark ML-DSA as FIPS-unapproved - Enable ML-DSA at TLS 1.3 level - Preserve ARM registers, reenable ARM assembly - Disable assembly on aarch64 as a stopgap measure - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild against updated golang - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild go-fdo-client against updated golang - Rebuild go-fdo-client against updated golang - Rebuild against updated golang - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild against updated golang - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild go-fdo-server against updated golang - Rebuild against updated golang - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild against updated golang - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild go-fdo-server against updated golang - Rebuild against updated golang - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild against updated golang - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild go-fdo-server against updated golang - Rebuild against updated golang - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild against updated golang - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild go-fdo-server against updated golang - Rebuild against updated golang - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Update to 1.0.1 upstream release - Resolves: RHEL-165475 - Rebuild to fix CVE-2026-32283 - Rebuild to fix CVE-2026-25679 and CVE-2026-27137 - Update to 1.0.0 upstream release - Add gating test for cs10 - Initial commit on c10s - Update to 3.8.0 - Update CI support - Add riscv64 to golang_arches for RHEL 10+ - Bump release for October 2024 mass rebuild: - Delete rpminspect.yaml - Enable debuginfo - Update to 3.6.0 - Add rpminspect.yaml - Bump release for June 2024 mass rebuild - Remove explicit dependency of forge-srpm-macros - Update to 3.8.0 - Update CI support - Add riscv64 to golang_arches for RHEL 10+ - Bump release for October 2024 mass rebuild: - Delete rpminspect.yaml - Enable debuginfo - Update to 3.6.0 - Add rpminspect.yaml - Bump release for June 2024 mass rebuild - Remove explicit dependency of forge-srpm-macros - Update to 3.8.0 - Update CI support - Add riscv64 to golang_arches for RHEL 10+ - Bump release for October 2024 mass rebuild: - Delete rpminspect.yaml - Enable debuginfo - Update to 3.6.0 - Add rpminspect.yaml - Bump release for June 2024 mass rebuild - Remove explicit dependency of forge-srpm-macros - Update to 3.8.0 - Update CI support - Add riscv64 to golang_arches for RHEL 10+ - Bump release for October 2024 mass rebuild: - Delete rpminspect.yaml - Enable debuginfo - Update to 3.6.0 - Add rpminspect.yaml - Bump release for June 2024 mass rebuild - Remove explicit dependency of forge-srpm-macros - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.10 (fips-1) - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - Update env var for v2 - Disable race for riscv64 - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Backport a patch to avoid loading mismatching GIRepository versions - Update to 1.79.1 - Update to 1.78.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Add workaround patch for compatibility with Python 3.12 - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.10 (fips-1) - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - Update env var for v2 - Disable race for riscv64 - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.10 (fips-1) - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - Update env var for v2 - Disable race for riscv64 - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.10 (fips-1) - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - Update env var for v2 - Disable race for riscv64 - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.10 (fips-1) - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - Update env var for v2 - Disable race for riscv64 - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.10 (fips-1) - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - Update env var for v2 - Disable race for riscv64 - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.10 (fips-1) - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - Update env var for v2 - Disable race for riscv64 - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.10 (fips-1) - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - Update env var for v2 - Disable race for riscv64 - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Update env var for v2 - Disable race for riscv64 - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update to Go 1.25.7 (fips-1) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update to Go 1.26.1 - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.26.4 (fips-1) - Set conditional ISA for bootstrap - Conditionalize baseline ISA - Remove ld.bfd patch for aarch64 - Update to Go 1.26.3 (fips-1) - Do not ignore any tests in check - Update to Go 1.26.2 (fips-2) - Update env var for v2 - Disable race for riscv64 - Update to Go 1.26.7 (fips-2) - Update to Go 1.26.7 (fips-1) - Update to Go 1.26.5 (fips-1) - Update to Go 1.25.7 (fips-1) - Update to Go 1.25.5 (fips-1) - gating.yaml: Add tier1 s390x tests - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_wasm_exec availability - plans/tier0.fmf: Import plan - rpminspect.yaml: Add testdata to annocheck ignore - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Un-retire this package in F38+ (#2162532) - Update as per suggestions given in rename package review (#2166813) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix missing config files Resolves: RHEL-47276 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert License tag to SPDX. - Drop the font unification which causes a lot of problems. Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix missing config files Resolves: RHEL-47276 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert License tag to SPDX. - Drop the font unification which causes a lot of problems. Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix missing config files Resolves: RHEL-47276 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert License tag to SPDX. - Drop the font unification which causes a lot of problems. Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with Jurand instead of deprecated javapackages-extra - Build with default JDK 17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to v2.042 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to follow New Fonts Packaging Guidelines - Migrate to SPDX license - Use metainfodir macro for metainfo files - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to v2.042 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to follow New Fonts Packaging Guidelines - Migrate to SPDX license - Use metainfodir macro for metainfo files - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop Conflict: google-noto-sans-cjk-vf-fonts to get them installed together. fontconfig basically estimate same score for both but static font still has a priority because of path name. This works as a workaround for some issues related to variable fonts. Resolves: rhbz #2240646 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix dnf upgrade issue - Resolves: RHBZ#2181349 - Update the spec file with some Obsoletes and Provides - Initial Packaging - Migrate to SPDX license - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop Conflict: google-noto-sans-cjk-fonts to get them installed together. fontconfig basically estimate same score for both but static font still has a priority because of path name. This works as a workaround for some issues related to variable fonts. Resolves: rhbz #2240646 - Add google-noto-sans-mono-cjk-vf-fonts sub package - Resolves: RHBZ#2215475 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix obsoletes_sans macro - Initial Packaging - Migrate to SPDX license - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop Conflict: google-noto-sans-cjk-fonts to get them installed together. fontconfig basically estimate same score for both but static font still has a priority because of path name. This works as a workaround for some issues related to variable fonts. Resolves: rhbz #2240646 - Add google-noto-sans-mono-cjk-vf-fonts sub package - Resolves: RHBZ#2215475 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix obsoletes_sans macro - Initial Packaging - Migrate to SPDX license - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop some Conflicts from the Noto Serif CJK fonts - Update to 2.002 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix obsoletes_serif macro (rhbz #2190290) - Initial Packaging - Migrate to SPDX license - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in config. - Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts - Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts Resolves: RHEL-47289 - Bump release for June 2024 mass rebuild - Updates to monthly release of 24.4.1 - Add google-noto-fonts-all, google-noto-fonts-all-vf, and google-noto-fonts-all-static meta packages. - Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts. - Updates to monthly release of 24.3.1 - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts Resolves: rhbz#2265259 - Updates to monthly release of 24.2.1 - Updates to monthly release of 24.1.1 - Remove substitute config for Symbol. Resolves: rhbz#2259962 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - AlmaLinux change: Set arch as x86_64_v2 for config file - Bump release for October 2024 mass rebuild: - Related: RHELMISC-3914 - fix plan definition - fix static analysis findings (RHEL-44568) - Related: RHELMISC-3914 - add gating.yaml file - Bump release for June 2024 mass rebuild - add signature file - Update to 1.23.2 - add tarball signature verification - updated to 1.22.0 - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - add support note to package descriptions (RHEL-113507) - update to 3.26.1 (RHEL-94234) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - fix icon path in desktop files (RHEL-34158) - replace gpsd-minimal conflicts with obsoletes (RHEL-33651) - fix annobin coverage (RHEL-33496) - add conflicts for gpsd-minimal (RHEL-33651) - drop compat subpackage (RHEL-33651) - fix dependencies for build without libs - rebuild - internalize scons (RHEL-14750) - add missing IPv6 support - add note about limited Red Hat support - drop unneeded API-compatibility patch - fix busy wait when reading from gpsd socket - fix some issues reported by coverity and shellcheck - fix command injection in gpsprof (CVE-2026-58459) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - add support note to package descriptions (RHEL-113507) - update to 3.26.1 (RHEL-94234) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix another command injection in gpsprof (CVE-2026-60122) - fix command injection in gpsprof (CVE-2026-58459) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - add support note to package descriptions (RHEL-113507) - update to 3.26.1 (RHEL-94234) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - add support note to package descriptions (RHEL-113507) - update to 3.26.1 (RHEL-94234) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - fix icon path in desktop files (RHEL-34158) - replace gpsd-minimal conflicts with obsoletes (RHEL-33651) - fix annobin coverage (RHEL-33496) - add conflicts for gpsd-minimal (RHEL-33651) - drop compat subpackage (RHEL-33651) - fix dependencies for build without libs - rebuild - internalize scons (RHEL-14750) - add missing IPv6 support - add note about limited Red Hat support - drop unneeded API-compatibility patch - fix busy wait when reading from gpsd socket - fix some issues reported by coverity and shellcheck - fix command injection in gpsprof (CVE-2026-58459) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - add support note to package descriptions (RHEL-113507) - update to 3.26.1 (RHEL-94234) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix another command injection in gpsprof (CVE-2026-60122) - fix command injection in gpsprof (CVE-2026-58459) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - add support note to package descriptions (RHEL-113507) - update to 3.26.1 (RHEL-94234) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves RHEL-161792: CVE-2026-27877 - Resolves RHEL-166318: CVE-2026-33810 - Resolves RHEL-166490: CVE-2026-32282 - Resolves RHEL-167360: CVE-2026-32280 - Resolves RHEL-167516: CVE-2026-32283 - Resolves RHEL-156596: CVE-2026-25679 - Resolves RHEL-144949: CVE-2026-21721 - Resolves RHEL-145413: CVE-2025-61728 - Resolves RHEL-146073: CVE-2025-61726 - Resolves RHEL-149246: CVE-2025-68121 - Resolves RHEL-140516: CVE-2025-61729 - Resolves RHEL-125629: CVE-2025-58183 - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97520: Rework grafana-selinux spec file sections - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89943: CVE-2025-4123 - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana - Resolves RHEL-84627: CVE-2025-30204 - Resolves RHEL-75917: grafana selinux issue with autofs_t - Resolves: RHEL-183694: CVE-2026-39821 - Resolves RHEL-161791: CVE-2026-27877 - Resolves RHEL-166459: CVE-2026-32282 - Resolves RHEL-167494: CVE-2026-32283 - Resolves RHEL-158484: CVE-2026-25679 - Resolves RHEL-144949: CVE-2026-21721 - Resolves RHEL-145413: CVE-2025-61728 - Resolves RHEL-146073: CVE-2025-61726 - Resolves RHEL-149246: CVE-2025-68121 - Resolves RHEL-140516: CVE-2025-61729 - Resolves RHEL-125629: CVE-2025-58183 - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97520: Rework grafana-selinux spec file sections - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89943: CVE-2025-4123 - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana - Resolves RHEL-84627: CVE-2025-30204 - Fix CVE-2026-33382: cap pre-auth form and public dashboard request bodies - Fix CVE-2026-33376: auth proxy IPv6 handling - Fix CVE-2026-8609: use unknown as failed login metric client label - Fix CVE-2026-33377: only set default permissions for new dashboards All backported from upstream grafana/grafana. - Resolves: RHEL-183694: CVE-2026-39821 - Resolves RHEL-161791: CVE-2026-27877 - Resolves RHEL-166459: CVE-2026-32282 - Resolves RHEL-167494: CVE-2026-32283 - Resolves RHEL-158484: CVE-2026-25679 - Resolves RHEL-144949: CVE-2026-21721 - Resolves RHEL-145413: CVE-2025-61728 - Resolves RHEL-146073: CVE-2025-61726 - Resolves RHEL-149246: CVE-2025-68121 - Resolves RHEL-140516: CVE-2025-61729 - Resolves RHEL-125629: CVE-2025-58183 - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97520: Rework grafana-selinux spec file sections - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89943: CVE-2025-4123 - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana - Rebuild against updated golang - Resolves RHEL-241197 - Resolves RHEL-241426 - Resolves RHEL-241690 - Resolves RHEL-241975 - Resolves RHEL-242171 - Resolves RHEL-242372 - Resolves RHEL-251690 - Resolves RHEL-251818 - Resolves RHEL-211020: CVE-2026-33377 - Resolves RHEL-211376: CVE-2026-8609 - Resolves RHEL-210981: CVE-2026-33376 - Resolves RHEL-211389: CVE-2026-33382 - Resolves RHEL-188282: Remove Lua ExclusiveArch macro for Konflux build - Resolves: RHEL-183694: CVE-2026-39821 - Resolves RHEL-161791: CVE-2026-27877 - Resolves RHEL-166459: CVE-2026-32282 - Resolves RHEL-167494: CVE-2026-32283 - Resolves RHEL-158484: CVE-2026-25679 - Resolves RHEL-144949: CVE-2026-21721 - Resolves RHEL-145413: CVE-2025-61728 - Resolves RHEL-146073: CVE-2025-61726 - Resolves RHEL-149246: CVE-2025-68121 - Resolves RHEL-166319: CVE-2026-33810 - Resolves RHEL-166491: CVE-2026-32282 - Resolves RHEL-167361: CVE-2026-32280 - Resolves RHEL-167517: CVE-2026-32283 - Resolves RHEL-156598: CVE-2026-25679 - Resolves RHEL-146074: CVE-2025-61726 - Resolves RHEL-149247: CVE-2025-68121 - RHEL-140517: CVE-2025-61729 - update to 5.3.0 tagged upstream sources, see CHANGELOG - Resolves RHEL-89218: CVE-2025-22871 - Remove visualizations for proc.hog.net and proc.hog.disk while they do not work via pmproxy - Resolves RHEL-67043: update to 5.2.2 tagged upstream community sources, see CHANGELOG - Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG - Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-166460: CVE-2026-32282 - Resolves RHEL-167495: CVE-2026-32283 - Resolves RHEL-158485: CVE-2026-25679 - Resolves RHEL-146074: CVE-2025-61726 - Resolves RHEL-149247: CVE-2025-68121 - RHEL-140517: CVE-2025-61729 - update to 5.3.0 tagged upstream sources, see CHANGELOG - Resolves RHEL-89218: CVE-2025-22871 - Remove visualizations for proc.hog.net and proc.hog.disk while they do not work via pmproxy - Resolves RHEL-67043: update to 5.2.2 tagged upstream community sources, see CHANGELOG - Rebuilt for updated golang - Resolves RHEL-241480, RHEL-251115, RHEL-242257, RHEL-242154, RHEL-241751 - Resolves RHEL-188287: Remove Lua ExclusiveArch macro for Konflux build - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-166460: CVE-2026-32282 - Resolves RHEL-167495: CVE-2026-32283 - Resolves RHEL-158485: CVE-2026-25679 - Resolves RHEL-146074: CVE-2025-61726 - Resolves RHEL-149247: CVE-2025-68121 - RHEL-140517: CVE-2025-61729 - update to 5.3.0 tagged upstream sources, see CHANGELOG - Resolves RHEL-89218: CVE-2025-22871 - Rebuilt against updated golang - Resolves RHEL-287474, RHEL-279348, RHEL-278699 - Rebuilt for updated golang - Resolves RHEL-241480, RHEL-251115, RHEL-242257, RHEL-242154, RHEL-241751 - Resolves RHEL-188287: Remove Lua ExclusiveArch macro for Konflux build - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-166460: CVE-2026-32282 - Resolves RHEL-167495: CVE-2026-32283 - Resolves RHEL-158485: CVE-2026-25679 - Resolves RHEL-146074: CVE-2025-61726 - Resolves RHEL-149247: CVE-2025-68121 - RHEL-140517: CVE-2025-61729 - update to 5.3.0 tagged upstream sources, see CHANGELOG - Resolves RHEL-161792: CVE-2026-27877 - Resolves RHEL-166318: CVE-2026-33810 - Resolves RHEL-166490: CVE-2026-32282 - Resolves RHEL-167360: CVE-2026-32280 - Resolves RHEL-167516: CVE-2026-32283 - Resolves RHEL-156596: CVE-2026-25679 - Resolves RHEL-144949: CVE-2026-21721 - Resolves RHEL-145413: CVE-2025-61728 - Resolves RHEL-146073: CVE-2025-61726 - Resolves RHEL-149246: CVE-2025-68121 - Resolves RHEL-140516: CVE-2025-61729 - Resolves RHEL-125629: CVE-2025-58183 - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97520: Rework grafana-selinux spec file sections - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89943: CVE-2025-4123 - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana - Resolves RHEL-84627: CVE-2025-30204 - Resolves RHEL-75917: grafana selinux issue with autofs_t - Resolves: RHEL-183694: CVE-2026-39821 - Resolves RHEL-161791: CVE-2026-27877 - Resolves RHEL-166459: CVE-2026-32282 - Resolves RHEL-167494: CVE-2026-32283 - Resolves RHEL-158484: CVE-2026-25679 - Resolves RHEL-144949: CVE-2026-21721 - Resolves RHEL-145413: CVE-2025-61728 - Resolves RHEL-146073: CVE-2025-61726 - Resolves RHEL-149246: CVE-2025-68121 - Resolves RHEL-140516: CVE-2025-61729 - Resolves RHEL-125629: CVE-2025-58183 - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97520: Rework grafana-selinux spec file sections - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89943: CVE-2025-4123 - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana - Resolves RHEL-84627: CVE-2025-30204 - Fix CVE-2026-33382: cap pre-auth form and public dashboard request bodies - Fix CVE-2026-33376: auth proxy IPv6 handling - Fix CVE-2026-8609: use unknown as failed login metric client label - Fix CVE-2026-33377: only set default permissions for new dashboards All backported from upstream grafana/grafana. - Resolves: RHEL-183694: CVE-2026-39821 - Resolves RHEL-161791: CVE-2026-27877 - Resolves RHEL-166459: CVE-2026-32282 - Resolves RHEL-167494: CVE-2026-32283 - Resolves RHEL-158484: CVE-2026-25679 - Resolves RHEL-144949: CVE-2026-21721 - Resolves RHEL-145413: CVE-2025-61728 - Resolves RHEL-146073: CVE-2025-61726 - Resolves RHEL-149246: CVE-2025-68121 - Resolves RHEL-140516: CVE-2025-61729 - Resolves RHEL-125629: CVE-2025-58183 - Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97520: Rework grafana-selinux spec file sections - Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89943: CVE-2025-4123 - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana - Rebuild against updated golang - Resolves RHEL-241197 - Resolves RHEL-241426 - Resolves RHEL-241690 - Resolves RHEL-241975 - Resolves RHEL-242171 - Resolves RHEL-242372 - Resolves RHEL-251690 - Resolves RHEL-251818 - Resolves RHEL-211020: CVE-2026-33377 - Resolves RHEL-211376: CVE-2026-8609 - Resolves RHEL-210981: CVE-2026-33376 - Resolves RHEL-211389: CVE-2026-33382 - Resolves RHEL-188282: Remove Lua ExclusiveArch macro for Konflux build - Resolves: RHEL-183694: CVE-2026-39821 - Resolves RHEL-161791: CVE-2026-27877 - Resolves RHEL-166459: CVE-2026-32282 - Resolves RHEL-167494: CVE-2026-32283 - Resolves RHEL-158484: CVE-2026-25679 - Resolves RHEL-144949: CVE-2026-21721 - Resolves RHEL-145413: CVE-2025-61728 - Resolves RHEL-146073: CVE-2025-61726 - Resolves RHEL-149246: CVE-2025-68121 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license expression - Drop Netscape license reference as no test file using it in 1.3.x releases - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Dropped ocaml in RHEL>9 Resolves: RHEL-16474 - Rebuild for golang 1.22.0 - Added hpnd-uc license - Converted license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3 - Use transaction file triggers to configure plugins - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Dropped ocaml in RHEL>9 Resolves: RHEL-16474 - Rebuild for golang 1.22.0 - Added hpnd-uc license - Converted license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3 - Use transaction file triggers to configure plugins - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Dropped ocaml in RHEL>9 Resolves: RHEL-16474 - Rebuild for golang 1.22.0 - Added hpnd-uc license - Converted license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3 - Use transaction file triggers to configure plugins - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Dropped ocaml in RHEL>9 Resolves: RHEL-16474 - Rebuild for golang 1.22.0 - Added hpnd-uc license - Converted license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3 - Use transaction file triggers to configure plugins - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Dropped ocaml in RHEL>9 Resolves: RHEL-16474 - Rebuild for golang 1.22.0 - Added hpnd-uc license - Converted license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3 - Use transaction file triggers to configure plugins - restrict manual restart of healthcheck service - fixed error while running healtcheck inside container - removed bootupd dependency - fixed CI tests - Ensure rollback trigger runs before systemd-update-done and only on updates - Log the correct system type when reporting rollback decisions - Fix CI/tests (Ansible callback config, GI deps) to keep gating green - Refresh Packit release config for Fedora delivery - Fix OS type detection - Do not remount /boot superblock/filesystem readonly - Handle vendor packages in Centos-Stream - Adhering to rust packaging best practices - Various spec file cleanups - Update src to greenboot-rs, binaries remain greenboot - Obsoletes/Conflicts for bash greenboot, Provides greenboot - Initial Package - Switched to native Fedora dependencies, removing vendoring. - restrict manual restart of healthcheck service - fixed error while running healtcheck inside container - removed bootupd dependency - fixed CI tests - Ensure rollback trigger runs before systemd-update-done and only on updates - Log the correct system type when reporting rollback decisions - Fix CI/tests (Ansible callback config, GI deps) to keep gating green - Refresh Packit release config for Fedora delivery - Fix OS type detection - Do not remount /boot superblock/filesystem readonly - Handle vendor packages in Centos-Stream - Adhering to rust packaging best practices - Various spec file cleanups - Update src to greenboot-rs, binaries remain greenboot - Obsoletes/Conflicts for bash greenboot, Provides greenboot - Initial Package - Switched to native Fedora dependencies, removing vendoring. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase for added gating - Fix SAST identified true positives - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix alternatives usage - Revert upstream change of mapping special characters for UTF-8 devices - Resolves: BZ#2224123 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebase to version 1.23.0 - Several files were removed from groff package - Several files were added to groff package - Backport screen-time-limits settings - Rebuild for the correct RHEL target - Add an option to enable restart/shutdown at lockscreen - Update to latest Fedora 41 changes - Bump release for October 2024 mass rebuild: - Update to 47.rc - Update to 47.alpha - Bump release for June 2024 mass rebuild - Use variable fonts - Move to the Red Hat fonts family for RHEL 10 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - License converted to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - 1.26.7 Resolves: RHEL-126057 - 1.26.2 Resolves: DESKTOP-1858 Rebuild Resolves: RHEL-73673 - 1.24.11 Resolves: RHEL-73673 Rebuild Resolves: RHEL-70405 - 1.24.10 Resolves: RHEL-70405 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 1.24.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 1.24.5 - 1.26.7 Resolves: RHEL-126057 - 1.26.2 Resolves: DESKTOP-1858 Rebuild Resolves: RHEL-73673 - 1.24.11 Resolves: RHEL-73673 Rebuild Resolves: RHEL-70405 - 1.24.10 Resolves: RHEL-70405 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 1.24.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 1.24.5 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184391 - Fix for CVE-2026-52719 Resolves: RHEL-184406 - Fix integer overflows in VMnc decoder (CVE-2026-52722) Resolves: RHEL-184425 - Fix for CVE-2026-52720: validate framebuffer update rectangles in VNC source plugin's RFB decoder Resolves: RHEL-184462 - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156114, RHEL-156172 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - fix for CVE-2025-3887 Resolves: RHEL-93045 - Update to 1.24.11 Resolves: RHEL-73674 - Update to 1.24.10 Resolves: RHEL-70406 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats (CVE-2026-59691) Resolves: RHEL-193550 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184391 - Fix for CVE-2026-52719 Resolves: RHEL-184406 - Fix integer overflows in VMnc decoder (CVE-2026-52722) Resolves: RHEL-184425 - Fix for CVE-2026-52720: validate framebuffer update rectangles in VNC source plugin's RFB decoder Resolves: RHEL-184462 - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156114, RHEL-156172 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - fix for CVE-2025-3887 Resolves: RHEL-93045 - Update to 1.24.11 Resolves: RHEL-73674 - Fix ADPCM decoder input validation (CVE-2026-19387) Resolves: RHEL-235500 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats (CVE-2026-59691) Resolves: RHEL-193550 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184391 - Fix for CVE-2026-52719 Resolves: RHEL-184406 - Fix integer overflows in VMnc decoder (CVE-2026-52722) Resolves: RHEL-184425 - Fix for CVE-2026-52720: validate framebuffer update rectangles in VNC source plugin's RFB decoder Resolves: RHEL-184462 - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156114, RHEL-156172 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - fix for CVE-2025-3887 Resolves: RHEL-93045 - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156118, RHEL-156189 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - fix for CVE-2025-3887 Resolves: RHEL-93045 - Update to 1.24.11 Resolves: RHEL-73674 - Update to 1.24.10 Resolves: RHEL-70406 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 1.24.6 - Rebuild for opencv 4.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184391 - Fix for CVE-2026-52719 Resolves: RHEL-184406 - Fix integer overflows in VMnc decoder (CVE-2026-52722) Resolves: RHEL-184425 - Fix for CVE-2026-52720: validate framebuffer update rectangles in VNC source plugin's RFB decoder Resolves: RHEL-184462 - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156114, RHEL-156172 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - fix for CVE-2025-3887 Resolves: RHEL-93045 - Update to 1.24.11 Resolves: RHEL-73674 - Update to 1.24.10 Resolves: RHEL-70406 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats (CVE-2026-59691) Resolves: RHEL-193550 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184391 - Fix for CVE-2026-52719 Resolves: RHEL-184406 - Fix integer overflows in VMnc decoder (CVE-2026-52722) Resolves: RHEL-184425 - Fix for CVE-2026-52720: validate framebuffer update rectangles in VNC source plugin's RFB decoder Resolves: RHEL-184462 - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156114, RHEL-156172 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - fix for CVE-2025-3887 Resolves: RHEL-93045 - Update to 1.24.11 Resolves: RHEL-73674 - Fix ADPCM decoder input validation (CVE-2026-19387) Resolves: RHEL-235500 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats (CVE-2026-59691) Resolves: RHEL-193550 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184391 - Fix for CVE-2026-52719 Resolves: RHEL-184406 - Fix integer overflows in VMnc decoder (CVE-2026-52722) Resolves: RHEL-184425 - Fix for CVE-2026-52720: validate framebuffer update rectangles in VNC source plugin's RFB decoder Resolves: RHEL-184462 - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156114, RHEL-156172 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - fix for CVE-2025-3887 Resolves: RHEL-93045 - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156118, RHEL-156189 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - fix for CVE-2025-3887 Resolves: RHEL-93045 - Update to 1.24.11 Resolves: RHEL-73674 - Update to 1.24.10 Resolves: RHEL-70406 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 1.24.6 - Rebuild for opencv 4.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Add patch for CVE-2026-18297 Resolves: RHEL-246574 - Add patch for CVE-2026-2921 Resolves: RHEL-156122 - Fix crash in RTSP auth credential parsing (CVE-2026-85150) Resolves: RHEL-253746 - Add patch for CVE-2026-18297 Resolves: RHEL-246574 - Add patch for CVE-2026-2921 Resolves: RHEL-156122 - Add patch for CVE-2026-2921 Resolves: RHEL-156137 - Add patch for CVE-2026-18297 Resolves: RHEL-246574 - Add patch for CVE-2026-2921 Resolves: RHEL-156122 - Fix crash in RTSP auth credential parsing (CVE-2026-85150) Resolves: RHEL-253746 - Add patch for CVE-2026-18297 Resolves: RHEL-246574 - Add patch for CVE-2026-2921 Resolves: RHEL-156122 - Add patch for CVE-2026-2921 Resolves: RHEL-156137 - Add patch for CVE-2026-18297 Resolves: RHEL-246574 - Add patch for CVE-2026-2921 Resolves: RHEL-156122 - Fix crash in RTSP auth credential parsing (CVE-2026-85150) Resolves: RHEL-253746 - Add patch for CVE-2026-18297 Resolves: RHEL-246574 - Add patch for CVE-2026-2921 Resolves: RHEL-156122 - Add patch for CVE-2026-2921 Resolves: RHEL-156137 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73676 - Update to 1.24.10 Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996 Resolves: RHEL-70960, RHEL-70947, RHEL-70934 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 1.24.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 1.24.5 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling (CVE-2026-5056) Resolves: RHEL-222333 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73676 - Update to 1.24.10 Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996 Resolves: RHEL-70960, RHEL-70947, RHEL-70934 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay (CVE-2026-18649) Resolves: RHEL-224158 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling (CVE-2026-5056) Resolves: RHEL-222333 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73676 - Update to 1.24.10 Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996 Resolves: RHEL-70960, RHEL-70947, RHEL-70934 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239045 - Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI files (CVE-2026-73433) Resolves: RHEL-239062 - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay (CVE-2026-18649) Resolves: RHEL-224158 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling (CVE-2026-5056) Resolves: RHEL-222333 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73676 - Update to 1.24.10 Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996 Resolves: RHEL-70960, RHEL-70947, RHEL-70934 - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246557 - Fix insufficient size validation in MRF file parsing in qtmoovrecover (CVE-2026-18296) Resolves: RHEL-246546 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239045 - Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI files (CVE-2026-73433) Resolves: RHEL-239062 - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay (CVE-2026-18649) Resolves: RHEL-224158 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling (CVE-2026-5056) Resolves: RHEL-222333 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Fix use-after-free vulnerability in RTP SBC depayloader (CVE-2026-18299) Resolves: RHEL-246613 - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246557 - Fix insufficient size validation in MRF file parsing in qtmoovrecover (CVE-2026-18296) Resolves: RHEL-246546 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239045 - Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI files (CVE-2026-73433) Resolves: RHEL-239062 - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay (CVE-2026-18649) Resolves: RHEL-224158 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling (CVE-2026-5056) Resolves: RHEL-222333 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156142, RHEL-156119 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73676 - Update to 1.24.10 Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996 Resolves: RHEL-70960, RHEL-70947, RHEL-70934 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 1.24.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 1.24.5 - 1.24.4 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73676 - Update to 1.24.10 Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996 Resolves: RHEL-70960, RHEL-70947, RHEL-70934 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 1.24.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 1.24.5 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling (CVE-2026-5056) Resolves: RHEL-222333 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73676 - Update to 1.24.10 Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996 Resolves: RHEL-70960, RHEL-70947, RHEL-70934 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay (CVE-2026-18649) Resolves: RHEL-224158 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling (CVE-2026-5056) Resolves: RHEL-222333 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73676 - Update to 1.24.10 Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996 Resolves: RHEL-70960, RHEL-70947, RHEL-70934 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239045 - Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI files (CVE-2026-73433) Resolves: RHEL-239062 - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay (CVE-2026-18649) Resolves: RHEL-224158 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling (CVE-2026-5056) Resolves: RHEL-222333 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73676 - Update to 1.24.10 Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996 Resolves: RHEL-70960, RHEL-70947, RHEL-70934 - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246557 - Fix insufficient size validation in MRF file parsing in qtmoovrecover (CVE-2026-18296) Resolves: RHEL-246546 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239045 - Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI files (CVE-2026-73433) Resolves: RHEL-239062 - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay (CVE-2026-18649) Resolves: RHEL-224158 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling (CVE-2026-5056) Resolves: RHEL-222333 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Fix use-after-free vulnerability in RTP SBC depayloader (CVE-2026-18299) Resolves: RHEL-246613 - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246557 - Fix insufficient size validation in MRF file parsing in qtmoovrecover (CVE-2026-18296) Resolves: RHEL-246546 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239045 - Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI files (CVE-2026-73433) Resolves: RHEL-239062 - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay (CVE-2026-18649) Resolves: RHEL-224158 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling (CVE-2026-5056) Resolves: RHEL-222333 - Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705) Resolves: RHEL-184480 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156133, RHEL-156112 - Update to 1.26.7 Resolves: RHEL-126057 - Add patch for CVE-2026-3083 and CVE-2026-3085 Resolves: RHEL-156142, RHEL-156119 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73676 - Update to 1.24.10 Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996 Resolves: RHEL-70960, RHEL-70947, RHEL-70934 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 1.24.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 1.24.5 - 1.24.4 - Fix CVE-2026-53703: multiple security issues in rmdemux Resolves: RHEL-184439 - Add patches for CVE-2026-2920 and CVE-2026-2922 Resolves: RHEL-156044, RHEL-156165 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73677 - Update to 1.24.10 Resolves: RHEL-70409 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 1.24.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Fix CVE-2026-19389: integer overflow vulnerabilities in asfdemux Resolves: RHEL-235515 - Fix CVE-2026-53703: multiple security issues in rmdemux Resolves: RHEL-184439 - Add patches for CVE-2026-2920 and CVE-2026-2922 Resolves: RHEL-156044, RHEL-156165 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73677 - Update to 1.24.10 Resolves: RHEL-70409 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add patches for CVE-2026-2920 and CVE-2026-2922 Resolves: RHEL-156045, RHEL-156176 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73677 - Update to 1.24.10 Resolves: RHEL-70409 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 1.24.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 1.24.5 - 1.24.4 - Update to 1.26.7 Resolves: RHEL-126057 - Update to 1.26.2 Resolves: DESKTOP-1858 - Update to 1.24.11 Resolves: RHEL-73678 - Update to 1.24.10 Resolves: RHEL-71154 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 1.24.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 1.24.5 - 1.24.4 - 1.24.3 - Await more motion events before deactivating menus Resolves: RHEL-47037 - Stop relying on xpms in the testsuite Resolves: RHEL-69453 - Avoid criticals on headless systems Resolves: RHEL-40884 - Hide emoji chooser unless explicitly requested Resolves: RHEL-65214 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Don't require package gtk-immodules-imsettings as it isn't part of RHEL 10 (it's built from GTK 2 SRPM which isn't presented) - Resolves: RHEL-38223 - Update to 3.24.43 - Resolves: RHEL-46990 - Bump release for June 2024 mass rebuild - Update to 3.24.42 - Enable profiler support - Update to 3.24.41 - Update to 3.24.40 - Update to 3.24.39 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.3.1 release - Await more motion events before deactivating menus Resolves: RHEL-47037 - Stop relying on xpms in the testsuite Resolves: RHEL-69453 - Avoid criticals on headless systems Resolves: RHEL-40884 - Hide emoji chooser unless explicitly requested Resolves: RHEL-65214 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Don't require package gtk-immodules-imsettings as it isn't part of RHEL 10 (it's built from GTK 2 SRPM which isn't presented) - Resolves: RHEL-38223 - Update to 3.24.43 - Resolves: RHEL-46990 - Bump release for June 2024 mass rebuild - Update to 3.24.42 - Enable profiler support - Update to 3.24.41 - Update to 3.24.40 - Update to 3.24.39 - Await more motion events before deactivating menus Resolves: RHEL-47037 - Stop relying on xpms in the testsuite Resolves: RHEL-69453 - Avoid criticals on headless systems Resolves: RHEL-40884 - Hide emoji chooser unless explicitly requested Resolves: RHEL-65214 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Don't require package gtk-immodules-imsettings as it isn't part of RHEL 10 (it's built from GTK 2 SRPM which isn't presented) - Resolves: RHEL-38223 - Update to 3.24.43 - Resolves: RHEL-46990 - Bump release for June 2024 mass rebuild - Update to 3.24.42 - Enable profiler support - Update to 3.24.41 - Update to 3.24.40 - Update to 3.24.39 - Await more motion events before deactivating menus Resolves: RHEL-47037 - Stop relying on xpms in the testsuite Resolves: RHEL-69453 - Avoid criticals on headless systems Resolves: RHEL-40884 - Hide emoji chooser unless explicitly requested Resolves: RHEL-65214 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Don't require package gtk-immodules-imsettings as it isn't part of RHEL 10 (it's built from GTK 2 SRPM which isn't presented) - Resolves: RHEL-38223 - Update to 3.24.43 - Resolves: RHEL-46990 - Bump release for June 2024 mass rebuild - Update to 3.24.42 - Enable profiler support - Update to 3.24.41 - Update to 3.24.40 - Update to 3.24.39 - Await more motion events before deactivating menus Resolves: RHEL-47037 - Stop relying on xpms in the testsuite Resolves: RHEL-69453 - Avoid criticals on headless systems Resolves: RHEL-40884 - Hide emoji chooser unless explicitly requested Resolves: RHEL-65214 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Don't require package gtk-immodules-imsettings as it isn't part of RHEL 10 (it's built from GTK 2 SRPM which isn't presented) - Resolves: RHEL-38223 - Update to 3.24.43 - Resolves: RHEL-46990 - Bump release for June 2024 mass rebuild - Update to 3.24.42 - Enable profiler support - Update to 3.24.41 - Update to 3.24.40 - Update to 3.24.39 - Use a gtk3 servers file if it exists - Fix a focus problem in the file chooser - Hide emoji chooser unless explicitly requested - Update to 4.16.7 - Bump release for October 2024 mass rebuild: - Update to GTK 4.16.3 - Fix missing popovers - Update to 4.15.3 - Bump release for June 2024 mass rebuild - Stop using objcopy for resources - vulkan: Add VkMemoryDedicatedAllocateInfo for dmabufs - Use a gtk3 servers file if it exists - Fix a focus problem in the file chooser - Hide emoji chooser unless explicitly requested - Update to 4.16.7 - Bump release for October 2024 mass rebuild: - Update to GTK 4.16.3 - Fix missing popovers - Use a gtk3 servers file if it exists - Fix a focus problem in the file chooser - Hide emoji chooser unless explicitly requested - Update to 4.16.7 - Bump release for October 2024 mass rebuild: - Update to GTK 4.16.3 - Fix missing popovers - Update to 4.15.3 - Bump release for June 2024 mass rebuild - Stop using objcopy for resources - vulkan: Add VkMemoryDedicatedAllocateInfo for dmabufs - Use a gtk3 servers file if it exists - Fix a focus problem in the file chooser - Hide emoji chooser unless explicitly requested - Update to 4.16.7 - Bump release for October 2024 mass rebuild: - Update to GTK 4.16.3 - Fix missing popovers - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - gating enabled - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 4.13.2 - Update to 4.13.1 - Update to 4.12.0 - Drop COPYING.tools and remove GPL-2.0-or-later from license tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 4.11.3 - Update to 5.14.2 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 5.11.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 5.10.0 - Update to 5.9.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 32.1.3 - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with Jurand instead of deprecated javapackages-extra - Build with default JDK 17 - Enable building for ppc64le - Fix binary LUKS keys resolves: RHEL-174518 - Windows firstboot: Add exit code 250 to skip reboots Rework documentation for firstboot feature resolves: RHEL-174517 - Write sentinel file after firstboot scripts finish related: RHEL-161192 - Fix location of Windows Vista and Windows 2008 Server R1 drivers related: RHEL-174513 - Synchronize spec file with Fedora - Fix pnputils after virt-customize --inject-virtio-win resolves: RHEL-116537 - Unify spec files between Fedora and RHEL. - Ensure a minimum version of libguestfs is installed at build and run time. resolves: RHEL-116716 - Remove virt-customize subscription-manager options resolves: RHEL-122307 - Add AV and GPOs to virt-inspector output resolves: RHEL-125955 - Expose XFS version in virt-filesystems resolves: RHEL-144074 - Rebase to guestfs-tools 1.54.0 resolves: RHEL-81734 - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error resolves: RHEL-83201 - virt-drivers fails on opensuse guest if kernel-source is installed resolves: RHEL-92604 - builder: Update link to templates to use https resolves: RHEL-94873 - Fix SELinux relabelling in Linux split-/usr resolves: RHEL-109129 - Rebase to guestfs-tools 1.52.2 resolves: RHEL-56812 - Replace Jansson with json-c resolves: RHEL-65295 - New stable version 1.52.1 - Rebase on top of patches from RHEL 9.5 - Reboot Windows between each firstboot script to improve reliability resolves: RHEL-56319 - customize: Implement --inject-blnsvr operation resolves: RHEL-56330 - Add support for nbd+unix:// URIs resolves: RHEL-56332 - Enable building for ppc64le - Drop setfiles -F flag resolves: RHEL-260203 - Fix binary LUKS keys resolves: RHEL-174518 - Windows firstboot: Add exit code 250 to skip reboots Rework documentation for firstboot feature resolves: RHEL-174517 - Write sentinel file after firstboot scripts finish related: RHEL-161192 - Fix location of Windows Vista and Windows 2008 Server R1 drivers related: RHEL-174513 - Synchronize spec file with Fedora - Fix pnputils after virt-customize --inject-virtio-win resolves: RHEL-116537 - Unify spec files between Fedora and RHEL. - Ensure a minimum version of libguestfs is installed at build and run time. resolves: RHEL-116716 - Remove virt-customize subscription-manager options resolves: RHEL-122307 - Add AV and GPOs to virt-inspector output resolves: RHEL-125955 - Expose XFS version in virt-filesystems resolves: RHEL-144074 - Rebase to guestfs-tools 1.54.0 resolves: RHEL-81734 - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error resolves: RHEL-83201 - virt-drivers fails on opensuse guest if kernel-source is installed resolves: RHEL-92604 - builder: Update link to templates to use https resolves: RHEL-94873 - Fix SELinux relabelling in Linux split-/usr resolves: RHEL-109129 - Rebase to guestfs-tools 1.52.2 resolves: RHEL-56812 - Replace Jansson with json-c resolves: RHEL-65295 - Enable building for ppc64le - Synchronize spec file with Fedora - Fix pnputils after virt-customize --inject-virtio-win resolves: RHEL-116537 - Unify spec files between Fedora and RHEL. - Ensure a minimum version of libguestfs is installed at build and run time. resolves: RHEL-116716 - Remove virt-customize subscription-manager options resolves: RHEL-122307 - Add AV and GPOs to virt-inspector output resolves: RHEL-125955 - Expose XFS version in virt-filesystems resolves: RHEL-144074 - Rebase to guestfs-tools 1.54.0 resolves: RHEL-81734 - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error resolves: RHEL-83201 - virt-drivers fails on opensuse guest if kernel-source is installed resolves: RHEL-92604 - builder: Update link to templates to use https resolves: RHEL-94873 - Fix SELinux relabelling in Linux split-/usr resolves: RHEL-109129 - Rebase to guestfs-tools 1.52.2 resolves: RHEL-56812 - Replace Jansson with json-c resolves: RHEL-65295 - New stable version 1.52.1 - Rebase on top of patches from RHEL 9.5 - Reboot Windows between each firstboot script to improve reliability resolves: RHEL-56319 - customize: Implement --inject-blnsvr operation resolves: RHEL-56330 - Add support for nbd+unix:// URIs resolves: RHEL-56332 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Backport upstream patch to fix C compatibility issue - make gutenprint and gutenprint-libs-ui dependant on cups-client - both checks for existence of lp - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Replace python3-chardet with python3-charset-normalizer - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there - Add other licenses to License tag and use SPDX identifiers to comply with FPG - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Backport upstream patch to fix C compatibility issue - make gutenprint and gutenprint-libs-ui dependant on cups-client - both checks for existence of lp - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Replace python3-chardet with python3-charset-normalizer - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there - Add other licenses to License tag and use SPDX identifiers to comply with FPG - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Backport upstream patch to fix C compatibility issue - make gutenprint and gutenprint-libs-ui dependant on cups-client - both checks for existence of lp - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Replace python3-chardet with python3-charset-normalizer - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there - Add other licenses to License tag and use SPDX identifiers to comply with FPG - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Backport upstream patch to fix C compatibility issue - make gutenprint and gutenprint-libs-ui dependant on cups-client - both checks for existence of lp - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Replace python3-chardet with python3-charset-normalizer - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there - Add other licenses to License tag and use SPDX identifiers to comply with FPG - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - Drop the gphoto2 and mtp subpackages on s390(x) architectures - Drop the gvfs-tests subpackage - Update to 1.54.2 - Bump release for June 2024 mass rebuild - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252305, RHEL-257341 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - Drop the gphoto2 and mtp subpackages on s390(x) architectures - Drop the gvfs-tests subpackage - Update to 1.54.2 - Bump release for June 2024 mass rebuild - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252305, RHEL-257341 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - Drop the gphoto2 and mtp subpackages on s390(x) architectures - Drop the gvfs-tests subpackage - Update to 1.54.2 - Bump release for June 2024 mass rebuild - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252305, RHEL-257341 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - Drop the gphoto2 and mtp subpackages on s390(x) architectures - Drop the gvfs-tests subpackage - Update to 1.54.2 - Bump release for June 2024 mass rebuild - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252305, RHEL-257341 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - Drop the gphoto2 and mtp subpackages on s390(x) architectures - Drop the gvfs-tests subpackage - Update to 1.54.2 - Bump release for June 2024 mass rebuild - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252305, RHEL-257341 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - Drop the gphoto2 and mtp subpackages on s390(x) architectures - Drop the gvfs-tests subpackage - Update to 1.54.2 - Bump release for June 2024 mass rebuild - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252305, RHEL-257341 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - Drop the gphoto2 and mtp subpackages on s390(x) architectures - Drop the gvfs-tests subpackage - Update to 1.54.2 - Bump release for June 2024 mass rebuild - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252305, RHEL-257341 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935) - Add edit mode support for smb backend (RHEL-71089) - Update to 1.54.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.54.3 - Add support for x-gvfs-trash mount option (RHEL-52355) - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7 - Resolves: RHEL-111948 - rebuild for CVE-2025-22871 - Resolves: RHEL-90008 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6 - Related: RHEL-80817 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5 - Related: RHEL-80817 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4 - Resolves: RHEL-83030 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3 - Related: RHEL-58990 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2 - Related: RHEL-58990 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1 - Resolves: RHEL-67315 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0 - Resolves: RHEL-67315 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7 - Resolves: RHEL-111948 - rebuild for CVE-2025-22871 - Resolves: RHEL-90008 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6 - Related: RHEL-80817 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5 - Related: RHEL-80817 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4 - Resolves: RHEL-83030 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3 - Related: RHEL-58990 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2 - Related: RHEL-58990 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1 - Resolves: RHEL-67315 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0 - Resolves: RHEL-67315 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.3.1 release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.3.1 release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Add Automatic-Module-Name manifest entry - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix denial of service vulnerability in mjson library (CVE-2025-11230) Resolves: RHEL-126653 - Add tmpfiles.d file to make systemd-tmpfiles create/set correct ownership/permissions of /var/lib/haproxy Resolves: RHEL-120174 - Fix CVE-2024-53008 Resolves: RHEL-69415 - Fix potential infinite loop condition h2_send (CVE-2024-45506, RHEL-57105) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.0.3 (RHEL-40620) - Bump release for June 2024 mass rebuild - Update to 2.9.4 (#2250339) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - peers: fix OOB heap write in dictionary cache update Resolves: RHEL-173335 - Fix denial of service vulnerability in mjson library (CVE-2025-11230) Resolves: RHEL-126653 - Add tmpfiles.d file to make systemd-tmpfiles create/set correct ownership/permissions of /var/lib/haproxy Resolves: RHEL-120174 - Fix CVE-2024-53008 Resolves: RHEL-69415 - Fix potential infinite loop condition h2_send (CVE-2024-45506, RHEL-57105) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.0.3 (RHEL-40620) - Bump release for June 2024 mass rebuild - Fix uint16_t overflow in FCGI demux record length (CVE-2026-55203) Resolves: RHEL-211068 - Fix NULL pointer dereference in hpack_dht_insert() (CVE-2026-55204) Resolves: RHEL-211081 - peers: fix OOB heap write in dictionary cache update Resolves: RHEL-173335 - Fix denial of service vulnerability in mjson library (CVE-2025-11230) Resolves: RHEL-126653 - Add tmpfiles.d file to make systemd-tmpfiles create/set correct ownership/permissions of /var/lib/haproxy Resolves: RHEL-120174 - Fix CVE-2024-53008 Resolves: RHEL-69415 - Fix potential infinite loop condition h2_send (CVE-2024-45506, RHEL-57105) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-74414 - Switch to using meson for build (#2277316) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-55386 - split libharfbuzz-cairo library into harfbuzz-cairo subpackage - Resolves: RHEL-45541 - SAST fix - Bump release for June 2024 mass rebuild - Update to 8.4.0 version (#2272294) - Update to 8.3.1 version (#2270012) - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Resolves: RHEL-74414 - Switch to using meson for build (#2277316) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-55386 - split libharfbuzz-cairo library into harfbuzz-cairo subpackage - Resolves: RHEL-45541 - SAST fix - Bump release for June 2024 mass rebuild - Update to 8.4.0 version (#2272294) - Update to 8.3.1 version (#2270012) - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Resolves: RHEL-74414 - Switch to using meson for build (#2277316) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-55386 - split libharfbuzz-cairo library into harfbuzz-cairo subpackage - Resolves: RHEL-45541 - SAST fix - Bump release for June 2024 mass rebuild - Update to 8.4.0 version (#2272294) - Update to 8.3.1 version (#2270012) - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to Fedora Rawhide resolves: RHEL-56804 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Perl 5.40 rebuild - Rebuilt for Python 3.13 - OCaml 5.2.0 for Fedora 41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to Fedora Rawhide resolves: RHEL-56804 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Perl 5.40 rebuild - Rebuilt for Python 3.13 - OCaml 5.2.0 for Fedora 41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Enable CONFIG_IEEE80211BE Resolves: RHEL-58728 - Update to upstream version 2.11 Resolves: RHEL-58728, RHEL-43497 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix potential regressions after rebase from f40 - Disable ENGINE API and enable SUITE B-192 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Correct path for example hostapd.conf cited in hostapd.conf.5 - Fix OOB memory access in Multi-Link Operation element parsing Resolves: RHEL-194049 - Enable CONFIG_IEEE80211BE Resolves: RHEL-58728 - Update to upstream version 2.11 Resolves: RHEL-58728, RHEL-43497 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-102977 rpm -q --changelog hplip no longer lists changelog - enable following links with curl in all use cases Resolves: RHEL-84817 - hp-plugin-download wrongly parsed file type Resolves: RHEL-97437 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - RHEL-35696 Remove/migrate additional license tags - RHEL-29931 hp-plugin-download uses removed curl option - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - add fallback url to hp-plugin-download - 2252302 - hplip-3.23.12 is available - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - RHEL-102977 rpm -q --changelog hplip no longer lists changelog - enable following links with curl in all use cases Resolves: RHEL-84817 - hp-plugin-download wrongly parsed file type Resolves: RHEL-97437 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix LEDM scanner regression - fix OSH issues - Create right dir - RHEL-266547 [IMAGE-MODE] missing /var/lib/hp on image-mode - Rebase to 3.26.6 - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - RHEL-102977 rpm -q --changelog hplip no longer lists changelog - enable following links with curl in all use cases Resolves: RHEL-84817 - hp-plugin-download wrongly parsed file type Resolves: RHEL-97437 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - RHEL-35696 Remove/migrate additional license tags - RHEL-29931 hp-plugin-download uses removed curl option - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - add fallback url to hp-plugin-download - 2252302 - hplip-3.23.12 is available - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - RHEL-102977 rpm -q --changelog hplip no longer lists changelog - enable following links with curl in all use cases Resolves: RHEL-84817 - hp-plugin-download wrongly parsed file type Resolves: RHEL-97437 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix LEDM scanner regression - fix OSH issues - Create right dir - RHEL-266547 [IMAGE-MODE] missing /var/lib/hp on image-mode - Rebase to 3.26.6 - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - RHEL-102977 rpm -q --changelog hplip no longer lists changelog - enable following links with curl in all use cases Resolves: RHEL-84817 - hp-plugin-download wrongly parsed file type Resolves: RHEL-97437 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - RHEL-35696 Remove/migrate additional license tags - RHEL-29931 hp-plugin-download uses removed curl option - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - add fallback url to hp-plugin-download - 2252302 - hplip-3.23.12 is available - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - RHEL-102977 rpm -q --changelog hplip no longer lists changelog - enable following links with curl in all use cases Resolves: RHEL-84817 - hp-plugin-download wrongly parsed file type Resolves: RHEL-97437 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix LEDM scanner regression - fix OSH issues - Create right dir - RHEL-266547 [IMAGE-MODE] missing /var/lib/hp on image-mode - Rebase to 3.26.6 - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Port to Mockito 5 - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 4.5.14 - Build with default JDK 17 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Port to OpenJDK 21 - Resolves: RHEL-52711 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Port to Mockito 5 - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 4.4.16 - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - new version 2.4.63 - Resolves: RHEL-76358 - httpd rebase to 2.4.63 - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket) configured in .htaccess doesn't work on httpd-2.4.62-1 - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - new version 2.4.63 - Resolves: RHEL-76358 - httpd rebase to 2.4.63 - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket) configured in .htaccess doesn't work on httpd-2.4.62-1 - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - new version 2.4.63 - Resolves: RHEL-76358 - httpd rebase to 2.4.63 - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket) configured in .htaccess doesn't work on httpd-2.4.62-1 - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - new version 2.4.63 - Resolves: RHEL-76358 - httpd rebase to 2.4.63 - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket) configured in .htaccess doesn't work on httpd-2.4.62-1 - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - new version 2.4.63 - Resolves: RHEL-76358 - httpd rebase to 2.4.63 - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket) configured in .htaccess doesn't work on httpd-2.4.62-1 - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - new version 2.4.63 - Resolves: RHEL-76358 - httpd rebase to 2.4.63 - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket) configured in .htaccess doesn't work on httpd-2.4.62-1 - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: rhbz#2158548 get hunspell-ko working again - Resolves: rhbz#2157049 latest release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop dependency on redland by dropping CREDITS file - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Related: rhbz#1788504 drop use of libdb from rdfproc - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use new upstream which provide more wordlist - Update to new SPDX license - Resolves:rhbz#2218154 - Drop dependency on aspell - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Resolves:rh#2230531 - Update to new Upstream Source - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use new upstream which provide more wordlist - Update to new SPDX license - Resolves:rhbz#2218155 - Drop dependency on aspell - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: RHEL-75998 - Backport from Fedora to remove BuildRequires: aspell - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: rhbz#2158548 get hunspell-ko working again - Resolves: rhbz#2157049 latest release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Temporarily revert to aspell. - Move BR from aspell to hunspell. - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - use dict_dirname of hunspell for future rhel, etc. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Temporarily revert to aspell. - Move BR from aspell to hunspell. - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - use dict_dirname of hunspell for future rhel, etc. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Temporarily revert to aspell. - Move BR from aspell to hunspell. - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - use dict_dirname of hunspell for future rhel, etc. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Update to v2.8. Now includes variants for Equatorial Guinea. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use new source archive generated using Farsi aspell dictionary - Resolves:rhbz#2218158 - Drop dependency on aspell - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: rhbz#2158548 get hunspell-ko working again - Resolves: rhbz#2157049 latest release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52482 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - latest release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use new source archive generated using Manx aspell dictionary - Resolves:rhbz#2218159 - Drop dependency on aspell - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - adding gating.yaml configuration - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use sources from pagure.io project - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add gating.yaml file - Fix Source and URL tags - Use correct upstream source tarball - Add Supplements for langpacks-ka - Enable this package to be used for EL < 9 version - Changed versioning - spec file cleanup - initial version - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use new source archive generated using Kirghiz aspell dictionary - Resolves:rhbz#2218161 - Drop dependency on aspell - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Resolves: RHEL-32831 - The mythes package is not present in RHEL10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52487 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Resolves: RHEL-32832 - The mythes package is not present in RHEL10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52797 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52487 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Resolves: RHEL-32832 - The mythes package is not present in RHEL10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52488 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52489 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52490 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52493 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to new upstream release 1.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Related: rhbz#1788504 drop use of libdb from rdfproc - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52495 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52301 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52302 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52496 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Update to new upstream release 20240301 (#2270165) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to the latest version - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52497 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52497 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52498 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52499 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52500 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52501 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52502 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52504 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52505 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52506 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52303 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52507 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52508 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52509 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - initial version - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52510 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52511 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52512 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52513 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52514 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52515 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop dependency on redland by dropping CREDITS file - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Related: rhbz#1788504 drop use of libdb from rdfproc - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - utils/gather-topology: fix a grep warning when matching octal sequence - utils/gather-topology: fix a grep warning when matching octal sequence - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811] - Resolves: RHEL-95811 ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10) - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434] - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434] - Resolves: RHEL-65434 ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617] - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617] - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617] - Resolves: RHEL-44617 ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons) - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679] - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679] - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679] - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679] - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679] - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679] - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679] - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679] - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679] - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679] - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679] - Resolves: RHEL-40107 ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.) - Resolves: RHEL-40679 ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811] - Resolves: RHEL-95811 ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10) - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434] - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434] - Resolves: RHEL-65434 ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617] - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617] - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617] - Resolves: RHEL-44617 ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons) - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679] - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679] - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679] - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679] - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679] - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679] - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679] - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679] - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679] - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679] - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679] - Resolves: RHEL-40107 ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.) - Resolves: RHEL-40679 ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811] - Resolves: RHEL-95811 ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10) - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434] - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434] - Resolves: RHEL-65434 ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617] - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617] - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617] - Resolves: RHEL-44617 ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons) - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679] - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679] - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679] - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679] - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679] - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679] - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679] - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679] - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679] - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679] - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679] - Resolves: RHEL-40107 ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.) - Resolves: RHEL-40679 ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811] - Resolves: RHEL-95811 ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10) - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434] - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434] - Resolves: RHEL-65434 ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617] - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617] - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617] - Resolves: RHEL-44617 ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons) - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679] - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679] - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679] - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679] - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679] - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679] - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679] - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679] - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679] - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679] - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679] - Resolves: RHEL-40107 ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.) - Resolves: RHEL-40679 ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811] - Resolves: RHEL-95811 ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10) - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434] - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434] - Resolves: RHEL-65434 ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617] - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617] - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617] - Resolves: RHEL-44617 ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons) - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679] - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679] - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679] - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679] - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679] - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679] - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679] - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679] - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679] - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679] - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679] - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679] - Resolves: RHEL-40107 ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.) - Resolves: RHEL-40679 ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Properly check valgrind arches - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Resolves:rh#2230536 - Update to new Upstream Source - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Properly check valgrind arches - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Properly check valgrind arches - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Drop unwanted mythes-eo package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - adding gating.yaml configuration - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use sources from pagure.io project - Switch to libreoffice dictionaries from libreitalia.org - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Resolves: RHEL-32831 - The mythes package is not present in RHEL10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52487 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Resolves: RHEL-32832 - The mythes package is not present in RHEL10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52487 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Resolves: RHEL-32832 - The mythes package is not present in RHEL10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-46908 - Fix file hyph_pt_PT.dic permission - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-46908 - Fix file hyph_pt_PT.dic permission - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: rhbz#2148806 fix changelog dates - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-52512 - Add conditional for RHEL for using hunspell directory - Add tmt CI tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - latest version with clarified license - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Do not run modprobe in %post if the system is not running - Resolves: RHEL-78695 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix SPDX license identifiers - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Do not run modprobe in %post if the system is not running - Resolves: RHEL-78695 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix SPDX license identifiers - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Resolves: RHEL-83888 Bump to 1.5.32 - Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI - Bump to 1.5.31 - Delete RHEL specific packages - Update installed packages in CI - configure option for Flatpak build - Move xinit post scripts - Require gnome-shell-extension-no-overview in RHEL - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Delete tmt installation for RHEL10 CI - Disable ibus-panel rich condition in RHEL - Delete ibus-xx-desktop-testing-mutter.patch - Delete libXtst-devel dependency - Replace gnome-terminal with ptyxis - Install gnome-desktop-testing for RHEL - Delete xorg-x11-server-Xvfb gnome-session-xsession - Delete build packages for gnome-desktop-testing for RHEL - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific - Fix CI test case conditions - Add no-overview@fthx until gnome-shell-extension-no-overview is available - Add gnome-headless-session@.service until GDM will provide it - Replace GNOME Xorg with GNOME Wayland in CI - Replace STI with TMT in CI - Update CI for RHEL packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Bump to 1.5.17 - Bump release for October 2024 mass rebuild: - tests: Move gnome-calendar and gnome-epub-thumbnailer to Fedora only - tests: Add gnome-shell-47 to no-overview extension - tests: gdm-47~alpha-4 provides headless files - Update CI for RHEL10 - Add no-overview@fthx until gnome-shell-extension-no-overview is available - Add gnome-headless-session@.service until GDM will provide it - tests: Delete RHEL specific packages - tests: Update packages with comps-f41 - Add base-graphical - Add fonts default - Delete libcanberra-gtk3, libproxy-duktape - Delete tmt for RHEL CI - Replace STI with TMT in CI - Support GNOME Wayland and GTK4 in CI - Bump to 1.5.17 - Bump release for October 2024 mass rebuild: - tests: Move gnome-calendar and gnome-epub-thumbnailer to Fedora only - tests: Add gnome-shell-47 to no-overview extension - tests: gdm-47~alpha-4 provides headless files - Update CI for RHEL10 - Add no-overview@fthx until gnome-shell-extension-no-overview is available - Add gnome-headless-session@.service until GDM will provide it - tests: Delete RHEL specific packages - tests: Update packages with comps-f41 - Add base-graphical - Add fonts default - Delete libcanberra-gtk3, libproxy-duktape - Delete tmt for RHEL CI - Replace STI with TMT in CI - Support GNOME Wayland and GTK4 in CI - Resolves: RHEL-83888 Bump to 1.5.32 - Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI - Bump to 1.5.31 - Delete RHEL specific packages - Update installed packages in CI - configure option for Flatpak build - Move xinit post scripts - Require gnome-shell-extension-no-overview in RHEL - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Delete tmt installation for RHEL10 CI - Disable ibus-panel rich condition in RHEL - Delete ibus-xx-desktop-testing-mutter.patch - Delete libXtst-devel dependency - Replace gnome-terminal with ptyxis - Install gnome-desktop-testing for RHEL - Delete xorg-x11-server-Xvfb gnome-session-xsession - Delete build packages for gnome-desktop-testing for RHEL - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific - Fix CI test case conditions - Add no-overview@fthx until gnome-shell-extension-no-overview is available - Add gnome-headless-session@.service until GDM will provide it - Replace GNOME Xorg with GNOME Wayland in CI - Replace STI with TMT in CI - Update CI for RHEL packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Resolves: RHEL-83888 Bump to 1.5.32 - Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI - Bump to 1.5.31 - Delete RHEL specific packages - Update installed packages in CI - configure option for Flatpak build - Move xinit post scripts - Require gnome-shell-extension-no-overview in RHEL - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Delete tmt installation for RHEL10 CI - Disable ibus-panel rich condition in RHEL - Delete ibus-xx-desktop-testing-mutter.patch - Delete libXtst-devel dependency - Replace gnome-terminal with ptyxis - Install gnome-desktop-testing for RHEL - Delete xorg-x11-server-Xvfb gnome-session-xsession - Delete build packages for gnome-desktop-testing for RHEL - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific - Fix CI test case conditions - Add no-overview@fthx until gnome-shell-extension-no-overview is available - Add gnome-headless-session@.service until GDM will provide it - Replace GNOME Xorg with GNOME Wayland in CI - Replace STI with TMT in CI - Update CI for RHEL packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Fix some issue with On Screen Keyboard - Add ibus-hangul-fixes-osk.patch - Resolves: RHEL-69510 - Update CI tests - Resolves: RHEL-70370 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license - Update to 1.5.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 1.15.7 - bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add pointer casts for C89 compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.15.6 - bug fixes - Update to 1.15.5 - bug fixes - Update to 1.15.4 - Update network dictionary - Fix Caps Lock for English mode - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Resolves: RHEL-83888 Bump to 1.5.32 - Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI - Bump to 1.5.31 - Delete RHEL specific packages - Update installed packages in CI - configure option for Flatpak build - Move xinit post scripts - Require gnome-shell-extension-no-overview in RHEL - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Delete tmt installation for RHEL10 CI - Disable ibus-panel rich condition in RHEL - Delete ibus-xx-desktop-testing-mutter.patch - Delete libXtst-devel dependency - Replace gnome-terminal with ptyxis - Install gnome-desktop-testing for RHEL - Delete xorg-x11-server-Xvfb gnome-session-xsession - Delete build packages for gnome-desktop-testing for RHEL - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific - Fix CI test case conditions - Add no-overview@fthx until gnome-shell-extension-no-overview is available - Add gnome-headless-session@.service until GDM will provide it - Replace GNOME Xorg with GNOME Wayland in CI - Replace STI with TMT in CI - Update CI for RHEL packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 1.10.3 - bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.10.2 - bug fixes - Bump release for October 2024 mass rebuild: - Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of directory instead of checking Fedora version. - Bump release for June 2024 mass rebuild - Fix CI tests - Resolves:RHELMISC-3924 - adding gating configuration - Update to 1.4.29 - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv) 100%) - Update to 1.4.28 - Translation update from Weblate (Russian (ru), new, 100%) - Build against gtk3 by default (Resolves: https://github.com/ibus/ibus-m17n/issues/73) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.4.27 - Prefer commit to "return FALSE;" for space, and other keys where the msymbol name is exactly one character, add a sleep for Return. This is to avoid ordering problems in mutter. (Resolves: https://github.com/ibus/ibus-m17n/issues/72) - Resolves: RHEL-83888 Bump to 1.5.32 - Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI - Bump to 1.5.31 - Delete RHEL specific packages - Update installed packages in CI - configure option for Flatpak build - Move xinit post scripts - Require gnome-shell-extension-no-overview in RHEL - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Delete tmt installation for RHEL10 CI - Disable ibus-panel rich condition in RHEL - Delete ibus-xx-desktop-testing-mutter.patch - Delete libXtst-devel dependency - Replace gnome-terminal with ptyxis - Install gnome-desktop-testing for RHEL - Delete xorg-x11-server-Xvfb gnome-session-xsession - Delete build packages for gnome-desktop-testing for RHEL - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific - Fix CI test case conditions - Add no-overview@fthx until gnome-shell-extension-no-overview is available - Add gnome-headless-session@.service until GDM will provide it - Replace GNOME Xorg with GNOME Wayland in CI - Replace STI with TMT in CI - Update CI for RHEL packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome- shell-extension-no-overview for the CI test - Update to 1.17.6 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.17.4 - Fix compose support for ibus >= 1.5.28 (Resolves: https://github.com/mike-fabian/ibus-table/issues/145) - Translation update from Weblate (New language, Russian, (ru) 80%) - Use “<developer><name>…</name></developer>” in ibus-table.appdata.xml instead of “<developer_name>…</developer_name>” Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide. - Update to 1.17.3 - Support several backends for playing sounds Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674 - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0 - Update to 1.17.2 - Translation update from Weblate (de 100%, tr 100%) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.12 - appdata.xml files are now included upstream, remove from the .spec file - Migrate license tags to SPDX format - Update to 1.8.11 - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7) - Improve “improve_jyutping.py” to allow comments in the table - Update of jyutping.txt for Unicode 15.0.0 final release - Bump release for October 2024 mass rebuild: - Resolves: RHEL-36638 Fix CI test - Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome- desktop-testing, ibus-desktop-testing, gnome-shell-extension-no-overview for the CI test - Resolves: RHEL-31506 Update to 2.25.11 - Yet another fix to make it possible again to use keys with Unicode keysyms in keybindings and make it work with all known versions of ibus (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497) - Use NFC when doing the cursor correction after committing a preedit using space (Resolves: https://github.com/mike-fabian/ibus-typing- booster/issues/515) - Fix for ibus-1.5.30: Make it possible again to use keys with Unicode keysyms in keybindings (Resolves: https://github.com/mike-fabian/ibus- typing-booster/issues/497) - Bump release for June 2024 mass rebuild - Resolves: RHEL-36638 Update to 2.25.9 and Remove dependency on Xvfb from CI tests - Translation update from Weblate (cs 100%) - Update emoji annotations from CLDR - Drop Python < 3.6 support - Fix test_0_gtk.py: typing booster now avoids clearing the input in do_reset() when the preedit is empty - Remove dependency on Xvfb from ibus-typing-booster.spec - Support compose sequences containing ASCII keys written as <U00XX> code points (Resolves: https://github.com/mike-fabian/ibus-typing- booster/issues/510) - Translation update from Weblate (pt 91.3%) - adding gating.yaml - Resolves: RHEL-31506 Release 2.25.7 - Don’t use forward_key_event() on Gnome Wayland if the key might be a keyboard shortcut using a modifier (Resolves: https://github.com/mike- fabian/ibus-typing-booster/issues/507) - Resolves: RHEL-31506 Update to 2.25.6 - If Shift+something is pressed and then released, do not swallow the release of the Shift key (Resolves: https://github.com/mike-fabian/ibus- typing-booster/issues/504) - Decrease grid_row_spacing from 5 to 1 pixels to make the setup tool still fit on a 1024x768 pixel screen - Resolves: RHEL-31506 Update to 2.25.4 - Pass key which triggered cancel command to application if self._min_char_complete == 0 and there are no candidates (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/505) - Update emoji annotations from CLDR - Translation update from Weblate (ka 100%) - Resolves: RHEL-83888 Bump to 1.5.32 - Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan - Move gnome-calendar & gnome-epub-thumbnailer to Fedora specific in CI - Bump to 1.5.31 - Delete RHEL specific packages - Update installed packages in CI - configure option for Flatpak build - Move xinit post scripts - Require gnome-shell-extension-no-overview in RHEL - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Delete tmt installation for RHEL10 CI - Disable ibus-panel rich condition in RHEL - Delete ibus-xx-desktop-testing-mutter.patch - Delete libXtst-devel dependency - Replace gnome-terminal with ptyxis - Install gnome-desktop-testing for RHEL - Delete xorg-x11-server-Xvfb gnome-session-xsession - Delete build packages for gnome-desktop-testing for RHEL - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific - Fix CI test case conditions - Add no-overview@fthx until gnome-shell-extension-no-overview is available - Add gnome-headless-session@.service until GDM will provide it - Replace GNOME Xorg with GNOME Wayland in CI - Replace STI with TMT in CI - Update CI for RHEL packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2) - updated %patch to new syntax - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96667 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-59365 Fix coverity warnings - Bump release for June 2024 mass rebuild - Update to 74.2 - Update to 74.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix broken TestHebrewCalendarInTemporalLeapYear - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to JSS 5.9.0 - Resolves: RHEL-150666 - Rebase to JSS 5.9.0-beta2 - Resolves RHEL-143049: Add support to ML-DSA - Rebase to JSS 5.9.0-beta1 - Resolves RHEL-143049: Add support to ML-DSA - Rebase to JSS 5.7.0 - Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10] - Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112 - Rebase to JSS 5.6.0 - Rebase to JSS 5.6.0-alpha1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuilt with java-21-openjdk as default JDK: https://issues.redhat.com/browse/RHEL-34597 - Resolves: RHEL-54331 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to JSS 5.9.0 - Resolves: RHEL-150666 - Rebase to JSS 5.9.0-beta2 - Resolves RHEL-143049: Add support to ML-DSA - Rebase to JSS 5.9.0-beta1 - Resolves RHEL-143049: Add support to ML-DSA - Rebase to JSS 5.7.0 - Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10] - Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112 - Rebase to JSS 5.6.0 - Rebase to JSS 5.6.0-alpha1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuilt with java-21-openjdk as default JDK: https://issues.redhat.com/browse/RHEL-34597 - Resolves: RHEL-54331 - Rebase to LDAP SDK 5.6.0 - Rebase to LDAP SDK 5.6.0-alpha1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuilt with java-21-openjdk as default JDK: https://issues.redhat.com/browse/RHEL-34597 - Resolves: RHEL-54333 - Bump release for June 2024 mass rebuild - Rebase to LDAP SDK 5.5.0 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - update to use tomcat9 Resolves: RHEL-78038 - fix FTBFS - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.6 - Resolves: RHEL-259220 - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - update to use tomcat9 Resolves: RHEL-78038 - fix FTBFS - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.6 - Resolves: RHEL-259220 - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - update to use tomcat9 Resolves: RHEL-78038 - fix FTBFS - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.6 - Resolves: RHEL-259220 - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - update to use tomcat9 Resolves: RHEL-78038 - fix FTBFS - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.6 - Resolves: RHEL-259220 - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - update to use tomcat9 Resolves: RHEL-78038 - fix FTBFS - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.6 - Resolves: RHEL-259220 - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - update to use tomcat9 Resolves: RHEL-78038 - fix FTBFS - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.6 - Resolves: RHEL-259220 - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - update to use tomcat9 Resolves: RHEL-78038 - fix FTBFS - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.6 - Resolves: RHEL-259220 - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Upgrade to 2.3.7 (#2260623) - Upgrade to 2.3.6 - Upgrade to 2.3.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - spec: rebuild for 10.2 - spec: new upstream version 2.26.0 - spec: new upstream version 2.25.1 - spec: new upstream version 2.24.0 - spec: rebuild ignition with goexperiment=strictfipsruntime - spec: new upstream version 2.23.0 - spec: new upstream version 2.22.0 - Fix TMT prepare plans - Add initial TMT Gating Test - Resolves: #RHEL-85233 - spec: rebuild for 10.2 - spec: new upstream version 2.26.0 - spec: new upstream version 2.25.1 - spec: new upstream version 2.24.0 - spec: rebuild ignition with goexperiment=strictfipsruntime - spec: new upstream version 2.23.0 - spec: new upstream version 2.22.0 - Fix TMT prepare plans - Add initial TMT Gating Test - Resolves: #RHEL-85233 - spec: rebuild for 10.2 - spec: new upstream version 2.26.0 - spec: new upstream version 2.25.1 - spec: new upstream version 2.24.0 - spec: rebuild ignition with goexperiment=strictfipsruntime - spec: new upstream version 2.23.0 - spec: new upstream version 2.22.0 - Fix TMT prepare plans - Add initial TMT Gating Test - Resolves: #RHEL-85233 - spec: rebuild for 10.2 - spec: new upstream version 2.26.0 - spec: new upstream version 2.25.1 - spec: new upstream version 2.24.0 - spec: rebuild ignition with goexperiment=strictfipsruntime - spec: new upstream version 2.23.0 - spec: new upstream version 2.22.0 - Fix TMT prepare plans - Add initial TMT Gating Test - Resolves: #RHEL-85233 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Update to 52.1 - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - Bump release for June 2024 mass rebuild - Update to 3.1.10. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for Boost 1.83 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 3.1.9. - Rebase to upstream release 61.0 - Fix pyverbs tests - Rebase to upstream release v57.0 - Properly check %{valgrind_arches} - Fix data corruption in bnxt_re - Update to upstream release v54.0 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Update to upstream release v51.0 - Add rhel10 gating configuration and tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - New upstream release 58 (#2260272) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Move INIReader C++ library to inih-cpp subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - New upstream release 57 (#2221191) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops Resolves: RHEL-92555 - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120) - Add amdnpu linux firmware folder (RHEL-77950) - Introduce new PMF TA (RHEL-86837) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-85120, RHEL-77950, RHEL-86837 - accel: ivpu: Update firmware for NPU (RHEL-38586) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-38586 - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops Resolves: RHEL-92555 - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120) - Add amdnpu linux firmware folder (RHEL-77950) - Introduce new PMF TA (RHEL-86837) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-85120, RHEL-77950, RHEL-86837 - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops Resolves: RHEL-92555 - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - CI gating tests migration to tmt - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration of license tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix hang when BLKTRACESETUP fails and "-o -" is used - Related: RHEL-54662 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Update to 0.19 release - Add a message if not a trust agent/controller (RHEL-112752) - Check that expected NSS token matches the current FIPS state (RHEL-104144) - Add /etc/pki/tls/certs/ directory to file checker (RHEL-94649) - Check that allowed_uids in the SSSD config is valid (RHEL-116895) - IPAOpenSSLChainValidation: ignore default trust store (RHEL-99999) - Don't rely on order in trust agent/controller role check (RHEL-99532) - Warn in ipa-healthcheck if umask is not 022 (RHEL-85561) - Don't require fips-mode-setup for FIPS status (RHEL-67635) - Check for krbLastSuccessfulAuth being enabled (RHEL-84771) - Check expiration dates of user-provided certificates (RHEL-78399) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Skip DogtagCertsConfigCheck for PKI versions >= 11.5.0 (RHEL-39701) - Need to change log file permissions of IPA as per CIS benchmark (RHEL-44305) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.19 release - Add a message if not a trust agent/controller (RHEL-112752) - Check that expected NSS token matches the current FIPS state (RHEL-104144) - Add /etc/pki/tls/certs/ directory to file checker (RHEL-94649) - Check that allowed_uids in the SSSD config is valid (RHEL-116895) - IPAOpenSSLChainValidation: ignore default trust store (RHEL-99999) - Don't rely on order in trust agent/controller role check (RHEL-99532) - Warn in ipa-healthcheck if umask is not 022 (RHEL-85561) - Don't require fips-mode-setup for FIPS status (RHEL-67635) - Check for krbLastSuccessfulAuth being enabled (RHEL-84771) - Check expiration dates of user-provided certificates (RHEL-78399) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Skip DogtagCertsConfigCheck for PKI versions >= 11.5.0 (RHEL-39701) - Need to change log file permissions of IPA as per CIS benchmark (RHEL-44305) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Fix JSON value bounds checks in get_parameters and iperf_parse_arguments (CVE-2026-71217) - Resolves: RHEL-236170 - Resolves: RHEL-151876 - authentication no longer works with the new openssl - Resolves: RHEL-136170 - iperf Heap Buffer Overflow (CVE-2025-54349) - Resolves: RHEL-71809 - Denial of Service in iperf Due to Improper JSON Handling - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - DoS via UDP receive worker infinite loop (CVE-2026-102253) - Resolves: RHEL-273152 - Fix JSON value bounds checks in get_parameters and iperf_parse_arguments (CVE-2026-71217) - Resolves: RHEL-236170 - Resolves: RHEL-151876 - authentication no longer works with the new openssl - Resolves: RHEL-136170 - iperf Heap Buffer Overflow (CVE-2025-54349) - Resolves: RHEL-71809 - Denial of Service in iperf Due to Improper JSON Handling - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-151876 - authentication no longer works with the new openssl - Resolves: RHEL-136170 - iperf Heap Buffer Overflow (CVE-2025-54349) - Resolves: RHEL-71809 - Denial of Service in iperf Due to Improper JSON Handling - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - New version 3.17.1 - Fixes CVE-2024-26306 - Migrated to SPDX license - Improving testing for RHEL10 - Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print - Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19 Among others fixes ipmievd startup (fedora#2303185) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update IANA numbers - Apply patch from CentOS Stream, never applied upstream: Disable retry of pre-session "Get cipher suites" command as some BMCs are ignoring it (#1831158) - Apply patches from Debian, never applied upstream: - fix tsol buffer overflow, https://sourceforge.net/p/ipmitool/mailman/message/24405281/ - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/ - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print - Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19 Among others fixes ipmievd startup (fedora#2303185) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update IANA numbers - Apply patch from CentOS Stream, never applied upstream: Disable retry of pre-session "Get cipher suites" command as some BMCs are ignoring it (#1831158) - Apply patches from Debian, never applied upstream: - fix tsol buffer overflow, https://sourceforge.net/p/ipmitool/mailman/message/24405281/ - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/ - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebuilt to fix CVE-2026-25679 - rebuilt to fix CVE-2025-68121, CVE-2025-61726 - rebuild to fix CVE-2025-61729 - rebuild to fix CVE-2025-22871 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-49445 Rebase ipp-usb to 0.9.27 - RHEL-49445 Rebase ipp-usb to 0.9.26 - Bump release for June 2024 mass rebuild - rebuilt with golang-1.26.4-1.el10_2 to fix CVE-2026-33811, CVE-2026-27145 - rebuilt with golang-1.26.3-4.el10_2 to fix CVE-2026-32281 - rebuilt to fix CVE-2026-32280, CVE-2026-32282, CVE-2026-32283, CVE-2026-33810 - rebuilt to fix CVE-2026-27137, CVE-2026-25679 - fixed rebuild problem with redundant condition check in quirks.empty() - rebuilt to fix CVE-2025-68121 and CVE-2025-61726 - rebuilt to fix CVE-2025-61729 - rebuild to fix CVE-2025-22871 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-49445 Rebase ipp-usb to 0.9.27 - RHEL-49445 Rebase ipp-usb to 0.9.26 - Rebuilt with golang-1.26.7-1.el10_2 to fix CVE-2026-42504,CVE-2026-33818,CVE-2026-56853,CVE-2026-56859,CVE-2026-56860,CVE-2026-56862 - rebuilt with golang-1.26.4-1.el10_2 to fix CVE-2026-33811, CVE-2026-27145 - rebuilt with golang-1.26.3-4.el10_2 to fix CVE-2026-32281 - rebuilt to fix CVE-2026-32280, CVE-2026-32282, CVE-2026-32283, CVE-2026-33810 - rebuilt to fix CVE-2026-27137, CVE-2026-25679 - fixed rebuild problem with redundant condition check in quirks.empty() - rebuilt to fix CVE-2025-68121 and CVE-2025-61726 - rebuilt to fix CVE-2025-61729 - rebuild to fix CVE-2025-22871 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Use modules-core for conditional modules-extra dependency - Do not require kernel-modules-extra-matched meta package - Require new kernel-modules-extra-matched meta package - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582] - Bump for sidetag build - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add legacy actions for service save support - ipset-services to depend on iptables-nft-services - Require kernel-modules-extra - Bump release to trigger CI - Bump release to trigger CI - Turn absolute ipset-translate symlink into a relative one - Rebase onto 7.22 plus fixes - avoid pulling in kernel package if not needed - spec: Soft-depend on kernel-modules-extra - Use modules-core for conditional modules-extra dependency - Do not require kernel-modules-extra-matched meta package - Require new kernel-modules-extra-matched meta package - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582] - Bump for sidetag build - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add legacy actions for service save support - ipset-services to depend on iptables-nft-services - Require kernel-modules-extra - Bump release to trigger CI - Simplify Recommends again, kernel fixed Provides in modules-core packages - avoid pulling in kernel package if not needed - spec: Soft-depend on kernel-modules-extra - Use modules-core for conditional modules-extra dependency - Do not require kernel-modules-extra-matched meta package - Require new kernel-modules-extra-matched meta package - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582] - Bump for sidetag build - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add legacy actions for service save support - ipset-services to depend on iptables-nft-services - Require kernel-modules-extra - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725] - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725] - ip[6]tables-translate: fix test failures when WESP is defined (Phil Sutter) [RHEL-66725] - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473] - spec: Use bcond macro (Phil Sutter) [RHEL-67473] - spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232] - tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504] - spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386] - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725] - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725] - spec: Simplify Recommends again, kernel fixed Provides in modules-core packages (Phil Sutter) [RHEL-213273] - spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232] - tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504] - spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386] - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725] - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725] - ip[6]tables-translate: fix test failures when WESP is defined (Phil Sutter) [RHEL-66725] - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473] - spec: Use bcond macro (Phil Sutter) [RHEL-67473] - spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232] - tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504] - spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386] - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725] - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725] - spec: Simplify Recommends again, kernel fixed Provides in modules-core packages (Phil Sutter) [RHEL-213273] - spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232] - tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504] - spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386] - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725] - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725] - ip[6]tables-translate: fix test failures when WESP is defined (Phil Sutter) [RHEL-66725] - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473] - spec: Use bcond macro (Phil Sutter) [RHEL-67473] - spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232] - tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504] - spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386] - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725] - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725] - spec: Simplify Recommends again, kernel fixed Provides in modules-core packages (Phil Sutter) [RHEL-213273] - spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232] - tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504] - spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386] - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725] - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725] - ip[6]tables-translate: fix test failures when WESP is defined (Phil Sutter) [RHEL-66725] - Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473] - spec: Use bcond macro (Phil Sutter) [RHEL-67473] - spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232] - tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504] - spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386] - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725] - nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725] - spec: Simplify Recommends again, kernel fixed Provides in modules-core packages (Phil Sutter) [RHEL-213273] - spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232] - tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504] - spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386] - spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880] - Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030] - extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502] - spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455] - xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061] - extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286] - fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249] - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Pin the x86_64 EFI builds to the x86-64-v2 ISA baseline - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Strip down package, remove drivers except qemu drivers. - Resolves: RHEL-37610 - Bump release for June 2024 mass rebuild - Added iPXE 'reboot' & 'poweroff' commands - Update to latest git snapshot - Add support of NFS protocol - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix build with binutils 2.41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Pin the x86_64 EFI builds to the x86-64-v2 ISA baseline - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Strip down package, remove drivers except qemu drivers. - Resolves: RHEL-37610 - Bump release for June 2024 mass rebuild - Added iPXE 'reboot' & 'poweroff' commands - Update to latest git snapshot - Add support of NFS protocol - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix build with binutils 2.41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Pin the x86_64 EFI builds to the x86-64-v2 ISA baseline - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Strip down package, remove drivers except qemu drivers. - Resolves: RHEL-37610 - Bump release for June 2024 mass rebuild - Added iPXE 'reboot' & 'poweroff' commands - Update to latest git snapshot - Add support of NFS protocol - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix build with binutils 2.41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Converted license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2241891 - Add irssi perl-ntype patch for perl>=5.38 Resolves rhbz#2232750 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - verify upstream source signature - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-46910 - Fix xmllint error for iso_3166-2.xml file - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 4.16.0 version (#2258341) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 4.15.0 version (#2190318) - Update to 4.13.0 version (#2173897) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-46910 - Fix xmllint error for iso_3166-2.xml file - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 4.16.0 version (#2258341) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 4.15.0 version (#2190318) - Update to 4.13.0 version (#2173897) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild to force gating to use new gating config (changed genisoimage to xorriso for tests) - New Version 1.2.5 (bcl) Resolves: RHEL-45005 - testpyisomd5sum.py: Use a consistent iso size (bcl) - Remove quiet from iso creation, size seems wrong (bcl) - workflows: Move to Fedora 39 and checkout v4 (bcl) - Add support for riscv64 (davidlt) - workflows: Update to use actions/checkout (bcl) - Add a GitHub Action to run tests (bcl) - Add mips64 (wangray1021) - testpyisomd5sum.py: Support genisoimage, Python 2 (ryan) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix insufficiently quoted regular expressions which caused excessive warnings with Python 3.12 - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Update to upstream version 2.1.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Change license, reduce dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.1.2 release - Rebuild - Update to upstream version 2.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add build-dependency on which - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update to upstream version 2.4.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release 4.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release 4.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release 4.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Use el8 portable packages - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102295 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101803 - Update to jdk-21.0.8+2 (EA) - Update release notes to 21.0.8+2 - Sync the copy of the portable specfile with the latest update - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Related: RHEL-101803 - Resolves: RHEL-103211 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-235622 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235622 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188872 - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102295 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101803 - Update to jdk-21.0.8+2 (EA) - Update release notes to 21.0.8+2 - Sync the copy of the portable specfile with the latest update - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Related: RHEL-101803 - Resolves: RHEL-103211 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-235622 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235622 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188872 - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102295 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101803 - Update to jdk-21.0.8+2 (EA) - Update release notes to 21.0.8+2 - Sync the copy of the portable specfile with the latest update - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Related: RHEL-101803 - Resolves: RHEL-103211 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-235622 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235622 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188872 - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102295 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101803 - Update to jdk-21.0.8+2 (EA) - Update release notes to 21.0.8+2 - Sync the copy of the portable specfile with the latest update - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Related: RHEL-101803 - Resolves: RHEL-103211 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-235622 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235622 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188872 - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102295 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101803 - Update to jdk-21.0.8+2 (EA) - Update release notes to 21.0.8+2 - Sync the copy of the portable specfile with the latest update - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Related: RHEL-101803 - Resolves: RHEL-103211 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-235622 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235622 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188872 - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102295 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101803 - Update to jdk-21.0.8+2 (EA) - Update release notes to 21.0.8+2 - Sync the copy of the portable specfile with the latest update - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Related: RHEL-101803 - Resolves: RHEL-103211 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-235622 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235622 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188872 - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102295 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101803 - Update to jdk-21.0.8+2 (EA) - Update release notes to 21.0.8+2 - Sync the copy of the portable specfile with the latest update - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Related: RHEL-101803 - Resolves: RHEL-103211 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-235622 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235622 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188872 - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102295 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101803 - Update to jdk-21.0.8+2 (EA) - Update release notes to 21.0.8+2 - Sync the copy of the portable specfile with the latest update - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Related: RHEL-101803 - Resolves: RHEL-103211 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-235622 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235622 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188872 - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102295 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101803 - Update to jdk-21.0.8+2 (EA) - Update release notes to 21.0.8+2 - Sync the copy of the portable specfile with the latest update - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Related: RHEL-101803 - Resolves: RHEL-103211 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142857 - Resolves: RHEL-139565 - Resolves: RHEL-131428 - Resolves: RHEL-131441 - Resolves: RHEL-142861 - Resolves: RHEL-142815 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118771 - Related: RHEL-119468 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118771 - Resolves: RHEL-119468 - Use el8 portable packages - Bump release for PQC build - Related: RHEL-235622 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235622 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188872 - Bump release for PQC build - Related: RHEL-212302 - Related: RHEL-212303 - Related: RHEL-212304 - Related: RHEL-151191 - Related: RHEL-212305 - Related: RHEL-188872 - Related: RHEL-212306 - Related: RHEL-212307 - Related: RHEL-151162 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212302 - Resolves: RHEL-212303 - Resolves: RHEL-212304 - Resolves: RHEL-151191 - Resolves: RHEL-212305 - Resolves: RHEL-188872 - Resolves: RHEL-212306 - Resolves: RHEL-212307 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-151162 - Bump release for PQC build - Related: RHEL-169611 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169611 - Resolves: RHEL-133215 - Resolves: RHEL-146648 - Resolves: RHEL-148326 - Resolves: RHEL-148828 - Resolves: RHEL-157090 - Resolves: RHEL-161216 - Resolves: RHEL-161332 - Resolves: RHEL-169614 - Bump rpmrelease for CentOS build - Related: RHEL-142857 - Related: RHEL-139565 - Related: RHEL-131428 - Related: RHEL-131441 - Related: RHEL-142861 - Related: RHEL-142815 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Sync the copy of the portable specfile with the latest update - Related: RHEL-133733 - Related: RHEL-133735 - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-131897 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Resolves: RHEL-133733 - Resolves: RHEL-133735 - Resolves: RHEL-133763 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235627 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188883 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Sync the copy of the portable specfile with the latest update - Related: RHEL-133733 - Related: RHEL-133735 - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-131897 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Resolves: RHEL-133733 - Resolves: RHEL-133735 - Resolves: RHEL-133763 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235627 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188883 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Sync the copy of the portable specfile with the latest update - Related: RHEL-133733 - Related: RHEL-133735 - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-131897 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Resolves: RHEL-133733 - Resolves: RHEL-133735 - Resolves: RHEL-133763 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235627 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188883 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Sync the copy of the portable specfile with the latest update - Related: RHEL-133733 - Related: RHEL-133735 - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-131897 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Resolves: RHEL-133733 - Resolves: RHEL-133735 - Resolves: RHEL-133763 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235627 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188883 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Sync the copy of the portable specfile with the latest update - Related: RHEL-133733 - Related: RHEL-133735 - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-131897 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Resolves: RHEL-133733 - Resolves: RHEL-133735 - Resolves: RHEL-133763 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235627 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188883 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Sync the copy of the portable specfile with the latest update - Related: RHEL-133733 - Related: RHEL-133735 - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-131897 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Resolves: RHEL-133733 - Resolves: RHEL-133735 - Resolves: RHEL-133763 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235627 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188883 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Sync the copy of the portable specfile with the latest update - Related: RHEL-133733 - Related: RHEL-133735 - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-131897 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Resolves: RHEL-133733 - Resolves: RHEL-133735 - Resolves: RHEL-133763 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235627 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188883 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Sync the copy of the portable specfile with the latest update - Related: RHEL-133733 - Related: RHEL-133735 - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-131897 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Resolves: RHEL-133733 - Resolves: RHEL-133735 - Resolves: RHEL-133763 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235627 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188883 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Sync the copy of the portable specfile with the latest update - Related: RHEL-133733 - Related: RHEL-133735 - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-131897 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Resolves: RHEL-133733 - Resolves: RHEL-133735 - Resolves: RHEL-133763 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235627 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188883 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Sync the copy of the portable specfile with the latest update - Related: RHEL-133733 - Related: RHEL-133735 - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-131897 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Resolves: RHEL-133733 - Resolves: RHEL-133735 - Resolves: RHEL-133763 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142855 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139579 - Resolves: RHEL-131430 - Resolves: RHEL-131443 - Resolves: RHEL-142855 - Resolves: RHEL-142799 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235627 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188883 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155327 - Resolves: RHEL-155337 - Resolves: RHEL-155339 - Related: RHEL-155000 - Related: RHEL-146649 - Related: RHEL-148327 - Related: RHEL-148830 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-150976 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Resolves: RHEL-155000 - Resolves: RHEL-146649 - Resolves: RHEL-148327 - Resolves: RHEL-148830 - Resolves: RHEL-155044 - Bump rpmrelease for CentOS build - Related: RHEL-139579 - Related: RHEL-131430 - Related: RHEL-131443 - Related: RHEL-142855 - Related: RHEL-142799 - Update to upstream version 6.4.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Switch to OpenJDK 21 as default JDK/JRE - Drop generated Requires on JRE - Drop subpackages related to Java other than 21 - Resolves: RHEL-49822, RHEL-51276, RHEL-51276 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix flatpak builds of Java packages - Backport upstream patch to fix Flatpak builds - Add support for OpenJDK 21 - Update to upstream version 6.4.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Switch to OpenJDK 21 as default JDK/JRE - Drop generated Requires on JRE - Drop subpackages related to Java other than 21 - Resolves: RHEL-49822, RHEL-51276, RHEL-51276 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix flatpak builds of Java packages - Backport upstream patch to fix Flatpak builds - Add support for OpenJDK 21 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 4.0.1 - Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 4.0.4 - Update to upstream version 4.0.3 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 4.0.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 4.0.4 - Update to upstream version 4.0.3 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 4.0.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.5.1 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Remove provision of glassfish artifact - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add jaxb-istack-commons-maven-plugin subpackage - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 4.2.0 - Reorganize subpackages - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add jaxb-istack-commons-maven-plugin subpackage - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 4.2.0 - Reorganize subpackages - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 4.0.4 - Update to upstream version 4.0.3 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 4.0.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 4.0.4 - Update to upstream version 4.0.3 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 4.0.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 4.0.4 - Update to upstream version 4.0.3 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 4.0.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 4.0.4 - Update to upstream version 4.0.3 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 4.0.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 4.0.4 - Update to upstream version 4.0.3 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 4.0.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 4.0.4 - Update to upstream version 4.0.3 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 4.0.2 - Bump release for October 2024 mass rebuild: - add gating configuration - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebase to 0.20 (rhbz#2238815) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration, spec update - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration, spec update - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with default JDK 17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update to upstream version 4.0.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Build with default JDK 17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Resolves rhbz#2092837 jctools-4.0.1 is available - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Switch Java compiler source/target to 1.8 - Resolves: RHEL-52690 - Bump release for Aug 2024 java mass rebuild - Fix unexpected permissions of regular files - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild without generated Requires - Bump release for June 2024 mass rebuild - update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to version 5.14.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebase to version 5.13.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild without generated Requires - Bump release for June 2024 mass rebuild - update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to version 5.14.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebase to version 5.13.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Rebase jose-14 upstream version to c10s - Enable fmf metadata format for jose - Enable RHEL gating for jose - Update to release v12 - Fix test when using zlib-ng - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Switch to SPDX license string - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Switch Java compiler source/target to 1.8 - Resolves: RHEL-52694 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Improve fix of problem on upgrade of doc subpackage - Related: RHEL-65629 - Fix problem on upgrade of doc subpackage - Related: RHEL-65629 - Rebase to 0.18 - Resolves: RHEL-65629 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.17 - Fixes: rhbz#2231647 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update to upstream version 1.17.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Build with default JDK 17 - Unretire with version 1.16.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Replace CC-BY-2.5 annotations with Apache-2.0 ones - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with default JDK 17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Port to OpenJDK 21 - Resolves: RHEL-52712 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 4.13.2 - Change packaging to jar instead of bundle - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Remove build-dependency on asciidoc - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update to upstream version 5.10.2 - Update to upstream version 5.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 5.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Switch Java compiler source/target to 1.8 - Resolves: RHEL-52695 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release Fix ET_DYN vmlinux namespace support Resolves: RHEL-78572 - Bump release and update to the latest upstream version Fix DW_TAG_unspecified_type issue Resolves: RHEL-52280 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate license to SPDX - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix C89 compatibility issue (#2259428) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix typo in RPM macro breaking ELN builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Convert License tag to SPDX. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix C89 compatibility issue (#2259428) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix typo in RPM macro breaking ELN builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Convert License tag to SPDX. - Feature: Set up crypttab for encrypted dump target - Handle the case where systemd isn't installed (RHEL-87148) - Disable kdump.service explicitly if users request to (RHEL-84190) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Resolves: RHEL-32899 - Resolves: RHEL-29570 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Do not set environmental variables to prevent clashes with compilation time settings - Create /var/lib/kea through systemd-tmpfiles - Fix files owned by usbmon in image mode - Support for sending startup notifications to systemd II - New version 3.0.2 - Fixes CVE-2025-11232 - New version 3.0.1 - Fixes CVE-2025-40779 - Support for sending startup notifications to systemd - New version 3.0.0 - Remove broken keactrl in favor of systemd unit files - kea.spec: General cleanup and removal of lines that have no effect - kea-msg-compiler was moved from kea to kea-devel - New version 2.6.3 - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 - kea.conf: Remove /tmp/ from socket-name for existing configurations - kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention - kea.conf: Restrict directory permissions - Sync service files with upstream - Fix leases ownership when switching from root to kea user - Update location of fmf plans - New version 3.0.3 - Fixes CVE-2026-3608 - Do not set environmental variables to prevent clashes with compilation time settings - Create /var/lib/kea through systemd-tmpfiles - Fix files owned by usbmon in image mode - Support for sending startup notifications to systemd II - New version 3.0.2 - Fixes CVE-2025-11232 - New version 3.0.1 - Fixes CVE-2025-40779 - Support for sending startup notifications to systemd - New version 3.0.0 - Remove broken keactrl in favor of systemd unit files - kea.spec: General cleanup and removal of lines that have no effect - kea-msg-compiler was moved from kea to kea-devel - New version 2.6.3 - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 - kea.conf: Remove /tmp/ from socket-name for existing configurations - kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention - kea.conf: Restrict directory permissions - Sync service files with upstream - Fix leases ownership when switching from root to kea user - Do not set environmental variables to prevent clashes with compilation time settings - Create /var/lib/kea through systemd-tmpfiles - Fix files owned by usbmon in image mode - Support for sending startup notifications to systemd II - New version 3.0.2 - Fixes CVE-2025-11232 - New version 3.0.1 - Fixes CVE-2025-40779 - Support for sending startup notifications to systemd - New version 3.0.0 - Remove broken keactrl in favor of systemd unit files - kea.spec: General cleanup and removal of lines that have no effect - kea-msg-compiler was moved from kea to kea-devel - New version 2.6.3 - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 - kea.conf: Remove /tmp/ from socket-name for existing configurations - kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention - kea.conf: Restrict directory permissions - Sync service files with upstream - Fix leases ownership when switching from root to kea user - Update location of fmf plans - New version 3.0.3 - Fixes CVE-2026-3608 - Do not set environmental variables to prevent clashes with compilation time settings - Create /var/lib/kea through systemd-tmpfiles - Fix files owned by usbmon in image mode - Support for sending startup notifications to systemd II - New version 3.0.2 - Fixes CVE-2025-11232 - New version 3.0.1 - Fixes CVE-2025-40779 - Support for sending startup notifications to systemd - New version 3.0.0 - Remove broken keactrl in favor of systemd unit files - kea.spec: General cleanup and removal of lines that have no effect - kea-msg-compiler was moved from kea to kea-devel - New version 2.6.3 - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 - kea.conf: Remove /tmp/ from socket-name for existing configurations - kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention - kea.conf: Restrict directory permissions - Sync service files with upstream - Fix leases ownership when switching from root to kea user Add gating.yaml from c9s Related: RHEL-49565 - Fix name parsing for CVE-2024-41184 Resolves: RHEL-49565 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.2.8 (#2211385) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - kabi: handle symvers.zst Resolves: RHEL-124727 - Finish adding riscv64 (thanks Zhengyu He) Resolves: RHEL-85853 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add riscv64 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - kabi: handle symvers.zst Resolves: RHEL-124727 - Finish adding riscv64 (thanks Zhengyu He) Resolves: RHEL-85853 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add riscv64 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update the license and convert it to SPDX 3.0 (-only -or-later prefix) - Update to 2.3.1 - Build with NotoSans font and remove gnu-free-sans-fonts dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for libtrace* update - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to version 1.3 - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Resolves: rhbz#2115262 keycloak-httpd-client-install missing dependency to python-lxml - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420) [RHEL-168795] - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Avoid opening /dev/stdout when printing - Update to upstream version 0.2.9 - Enable ECC attestation - Enable different key sizes and curves for EK and AK - Update openssl crate to version 0.10.70 - Update to upstream version 0.2.7 - Bump release for October 2024 mass rebuild: - Add RHEL-10 gating.yaml - Bump release for June 2024 mass rebuild - Update to upstream version 0.2.5 - tests: Update CI test plan for C10S - Fix upgrade to not remove keylime-agent-rust - Use correct port when registrar TLS is enabled - Update to upstream version 0.2.9 - Enable ECC attestation - Enable different key sizes and curves for EK and AK - Update openssl crate to version 0.10.70 - Update to upstream version 0.2.7 - Bump release for October 2024 mass rebuild: - Add RHEL-10 gating.yaml - Bump release for June 2024 mass rebuild - Update to upstream version 0.2.9 - Enable ECC attestation - Enable different key sizes and curves for EK and AK - Update openssl crate to version 0.10.70 - Update to upstream version 0.2.7 - Bump release for October 2024 mass rebuild: - Add RHEL-10 gating.yaml - Bump release for June 2024 mass rebuild - Update to upstream version 0.2.5 - tests: Update CI test plan for C10S - Fix upgrade to not remove keylime-agent-rust - Use correct port when registrar TLS is enabled - Update to upstream version 0.2.9 - Enable ECC attestation - Enable different key sizes and curves for EK and AK - Update openssl crate to version 0.10.70 - Update to upstream version 0.2.7 - Bump release for October 2024 mass rebuild: - Add RHEL-10 gating.yaml - Bump release for June 2024 mass rebuild - Update to upstream version 0.2.9 - Enable ECC attestation - Enable different key sizes and curves for EK and AK - Update openssl crate to version 0.10.70 - Update to upstream version 0.2.7 - Bump release for October 2024 mass rebuild: - Add RHEL-10 gating.yaml - Bump release for June 2024 mass rebuild - Update to upstream version 0.2.5 - tests: Update CI test plan for C10S - Fix upgrade to not remove keylime-agent-rust - Use correct port when registrar TLS is enabled - Update to upstream version 0.2.9 - Enable ECC attestation - Enable different key sizes and curves for EK and AK - Update openssl crate to version 0.10.70 - Update to upstream version 0.2.7 - Bump release for October 2024 mass rebuild: - Add RHEL-10 gating.yaml - Bump release for June 2024 mass rebuild - Update to upstream version 0.2.9 - Enable ECC attestation - Enable different key sizes and curves for EK and AK - Update openssl crate to version 0.10.70 - Update to upstream version 0.2.7 - Bump release for October 2024 mass rebuild: - Add RHEL-10 gating.yaml - Bump release for June 2024 mass rebuild - Update to upstream version 0.2.5 - tests: Update CI test plan for C10S - Fix upgrade to not remove keylime-agent-rust - Use correct port when registrar TLS is enabled - Update to upstream version 0.2.9 - Enable ECC attestation - Enable different key sizes and curves for EK and AK - Update openssl crate to version 0.10.70 - Update to upstream version 0.2.7 - Bump release for October 2024 mass rebuild: - Add RHEL-10 gating.yaml - Bump release for June 2024 mass rebuild - keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420) [RHEL-168795] - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Avoid opening /dev/stdout when printing - keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420) [RHEL-168795] - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Avoid opening /dev/stdout when printing - keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420) [RHEL-168795] - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Avoid opening /dev/stdout when printing - keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420) [RHEL-168795] - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Avoid opening /dev/stdout when printing - keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420) [RHEL-168795] - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Avoid opening /dev/stdout when printing - keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420) [RHEL-168795] - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Avoid opening /dev/stdout when printing - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.6.3 - Related: rhbz#2121553 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Resolves: RHEL-171588 RHEL-171597 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-145356 - Create sub-package for xrealmauthz KDC plugin Resolves: RHEL-145358 - Improving kerberos ulog resize efficiency Resolves: RHEL-145397 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-88705 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88047 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-74295 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-76758 - Support PKCS11 EC client certs in PKINIT Resolves: RHEL-74373 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56058 - Add ECDH support for PKINIT (RFC5349) Resolves: RHEL-71881 - Make test dependencies optional if not part of CentOS/RHEL 10 Resolves: RHEL-65724 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-55427 - Fix various issues detected by static analysis Resolves: RHEL-45165 - Remove RSA protocol for PKINIT Resolves: RHEL-56070 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Do not include files with "~" termination in krb5-tests Resolves: RHEL-45995 - New upstream version (1.21.3) - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45387 RHEL-45378 - Fix memory leak in GSSAPI interface Resolves: RHEL-47284 - Fix memory leak in PMAP RPC interface Resolves: RHEL-47287 - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC Resolves: RHEL-47285 - Make TCP waiting time configurable Resolves: RHEL-47278 - Fix /dev/fd/1 memory fault and $0 for /dev/fd scripts Resolves: RHEL-146565 - Fix arbitrary command execution/code injection bugs Resolves: RHEL-99064 - Fix segfault upon SIGWINCH after 'stty -echo' Resolves: RHEL-89866 - Fix long multibyte characters paste issue via ssh Resolves: RHEL-87564 - Fix 'stty -echo' in scripts Resolves: RHEL-85455 - Add forking workaround for block stdout redir Resolves: RHEL-74980 - Fix crash on 'exec' after 'unset SHLVL' Resolves: RHEL-74970 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - new upstream release (RHEL-45981) - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license - Update to 1.2.80 - Resolves: RHBZ#2186606 - Port configure script to C99 (#2186199) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.2.79 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update package names for renaming google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts - make IME installation condition on service(graphical-login) instead of xorg-x11-server-Xorg (RHEL-36747) - drop sil-mingzat-fonts recommends from fonts-en - use Hebrew fonts for Yiddish (#2284093) - Bump release for June 2024 mass rebuild - Add some conditional for RHEL. - Added langpacks for sat and mni languages (#2259991 and #2259995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa. Resolves: rhbz#2225410 - Update for the tlwg-fonts package - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - adding gating.yaml configuration - Update to 0.0.65 - Add wuu, tok, glk, gbm, ssy - Remove aa_ER.UTF-8@saaho - Add kv_RU.UTF-8, chr_RU.UTF-8 - Add EU, EZ - Improve README and Makefile (Resolves: https://github.com/mike- fabian/langtable/issues/19) - Add more translations from CLDR - Get translation changes from CLDR - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.0.64 - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts} (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159) - Update to 0.0.63 - Add more translations from CLDR - Get translation changes from CLDR - Japanese: prefer anthy over kkc (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17) - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones() (Resolves: https://github.com/mike-fabian/langtable/issues/18) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Add explicit requires to the devel subpackages - Resolves: RHEL-60890 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package - update to 3.12.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763 - Adapt license tag to SPDX - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a typo in fontconfig config. - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert to new fonts packaging guidelines - Migrate to SPDX license expression - Drop very very old obsoletes for google-lato-fonts - Add gating CI tests in Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - gating enabled - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Actually upload new sources - New upstream version - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.15 and switch buildsystem to meson - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - gating enabled - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Actually upload new sources - New upstream version - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.15 and switch buildsystem to meson - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix for SWIG 4.3.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Remove unneeded openssl/engine.h causing build failures - Explicitly disable openssl engine (RHEL-33736) - Bump release for June 2024 mass rebuild - SWIG 4.2 and i686 compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update address of b.root-servers.net and some others (#2253462) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient query-response matching (RHEL-210690) - Fix for SWIG 4.3.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Remove unneeded openssl/engine.h causing build failures - Explicitly disable openssl engine (RHEL-33736) - Fix string2ibpi function (RHEL-90182) - update to 1.1.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - update to 1.0.0 - package shared ledmon library by Tony Asleson - fix incorrect License field syntax - rebuilt for sg3_utils 1.48 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Resolves: RHEL-71659 Fix additional memory leak - not detected by OSH - Fix Openscanhub issues (Resolves: RHEL-71659) - Initial commit on c10s Resolves: RHEL-25298 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.84.1 - Fix pkgconfig file regression (rhbz#2255937) - Update to 1.84.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.83.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Adding a timeout for TLS close - Resolves: RHEL-113472 - "cannot seek on data source" in TLS lftp sessions - Do not wait for server close-notify on TLS close - Resolves: RHEL-100407 - Improve fix for RHEL-91005 - Resolves: RHEL-91005 - Ensure proper closing of TLS connection - Resolves: RHEL-91005 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Removing lftp-scripts - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libICE 1.1.1 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libICE 1.1.1 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libSM 1.2.4 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libSM 1.2.4 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebase to 1.8.10 Resolves: https://issues.redhat.com/browse/RHEL-70185 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix deadlock in XRebindKeysym() Resolves: https://issues.redhat.com/browse/RHEL-45855 - Bump release for June 2024 mass rebuild - Add gating.yaml - Fix XTS test XCopyColormapAndFree/5 hangs Resolves: https://issues.redhat.com/browse/RHEL-40132 - Fix RHEL SAST Automation errors Resolves: https://issues.redhat.com/browse/RHEL-34918 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libX11 1.8.7 - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms() - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap - SPDX Migration - Rebase to 1.8.10 Resolves: https://issues.redhat.com/browse/RHEL-70185 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix deadlock in XRebindKeysym() Resolves: https://issues.redhat.com/browse/RHEL-45855 - Bump release for June 2024 mass rebuild - Add gating.yaml - Fix XTS test XCopyColormapAndFree/5 hangs Resolves: https://issues.redhat.com/browse/RHEL-40132 - Fix RHEL SAST Automation errors Resolves: https://issues.redhat.com/browse/RHEL-34918 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libX11 1.8.7 - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms() - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap - SPDX Migration - Rebase to 1.8.10 Resolves: https://issues.redhat.com/browse/RHEL-70185 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix deadlock in XRebindKeysym() Resolves: https://issues.redhat.com/browse/RHEL-45855 - Bump release for June 2024 mass rebuild - Add gating.yaml - Fix XTS test XCopyColormapAndFree/5 hangs Resolves: https://issues.redhat.com/browse/RHEL-40132 - Fix RHEL SAST Automation errors Resolves: https://issues.redhat.com/browse/RHEL-34918 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libX11 1.8.7 - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms() - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap - SPDX Migration - Rebase to 1.8.10 Resolves: https://issues.redhat.com/browse/RHEL-70185 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix deadlock in XRebindKeysym() Resolves: https://issues.redhat.com/browse/RHEL-45855 - Bump release for June 2024 mass rebuild - Add gating.yaml - Fix XTS test XCopyColormapAndFree/5 hangs Resolves: https://issues.redhat.com/browse/RHEL-40132 - Fix RHEL SAST Automation errors Resolves: https://issues.redhat.com/browse/RHEL-34918 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libX11 1.8.7 - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms() - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap - SPDX Migration - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - update to 1.0.11 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - update to 1.0.11 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXaw 1.0.15 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXaw 1.0.15 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXcomposite 0.4.6 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXcomposite 0.4.6 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXdamage 1.1.6 - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXdamage 1.1.6 - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXdmcp 1.1.4 - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - libXext 1.3.6-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXext 1.3.5-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - libXext 1.3.6-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXext 1.3.5-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXfixes 6.0.1 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXfixes 6.0.1 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXfont2 2.0.6 - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191882 Resolves: https://redhat.atlassian.net/browse/RHEL-191930 Resolves: https://redhat.atlassian.net/browse/RHEL-191949 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - CVE fix for: CVE-2026-59679 Resolves: https://redhat.atlassian.net/browse/RHEL-221949 - CVE fix for: CVE-2026-44950 Resolves: https://redhat.atlassian.net/browse/RHEL-222024 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191882 Resolves: https://redhat.atlassian.net/browse/RHEL-191930 Resolves: https://redhat.atlassian.net/browse/RHEL-191949 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix font loading Resolves: rhbz#2154735 - libXft 2.3.8-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXft 2.3.6-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix font loading Resolves: rhbz#2154735 - libXft 2.3.8-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXft 2.3.6-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - libXi 1.8.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - libXi 1.8.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXinerama 1.1.5-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXinerama 1.1.5-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXmu 1.1.4-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXmu 1.1.4-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXpm 3.5.17 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add missing BuildRequires - libXpm 3.5.15, fixes CVE-2022-46285, CVE-2022-44617, CVE-2022-4883 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXpm 3.5.17 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add missing BuildRequires - libXpm 3.5.15, fixes CVE-2022-46285, CVE-2022-44617, CVE-2022-4883 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXrandr 1.5.4 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXrandr 1.5.4 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXrender 0.9.11-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXrender 0.9.11-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXres 1.2.2 - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXt 1.3.0 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXt 1.3.0 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXtst 1.2.4-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXtst 1.2.4-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXv 1.0.12 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libXv 1.0.12 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libXxf86vm 1.1.5-1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Port configure script to C99 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix regressions caused by the get{gr,pw}nam_r patch (RHEL-40603) - Bump release for June 2024 mass rebuild - rebase to latest version (rhbz#2260000) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - make acl compatible with -D_FORTIFY_SOURCE=3 (rhbz#2249839) - preserve failed setfacl return code (RHEL-3909) - make the license tag more precise - Backport Georgian locale from git - Note, it will not be needed after release of new version of acl - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186106) - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186207) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix regressions caused by the get{gr,pw}nam_r patch (RHEL-40603) - Backport patches up to 1.6.10 - 1.6.8: bump patches up to 1.6.8 - Update to 1.6.6 with manual patching - Update to libadwaita 1.6.1 - Bump release for October 2024 mass rebuild: - Update to 1.6.0 - Bump to libadwaita-1.6-rc - Update to 1.6~alpha - Bump release for June 2024 mass rebuild - Fix various openscan issues - Bump release to trigger new test run. - Resolves: RHEL-70741 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license (Jeff Moyer) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Rebase to the latest upstream releases - Add gating.yaml via API - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuild against rpm-4.19 (https://fedoraproject.org/wiki/Changes/RPM-4.19) - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Related: CVE-2026-14164 - Resolves: CVE-2026-14164 - Resolves: CVE-2026-4424 - Release bump for typo in dist - Release bump - Resolves: CVE-2026-4111 - Resolves: CVE-2025-5914 - Resolves: CVE-2025-25724 - Fix for CVE-2024-57970 - Resolves: RHEL-79877 - Rebase to version 3.7.7 - Fixing SAST issues, accepted by upstream - Resolves: RHEL-39391 RHEL-67895 - Related: CVE-2026-16517 and CVE-2026-15028 - Related: CVE-2026-14164 - Resolves: CVE-2026-14164 - Resolves: CVE-2026-4424 - Release bump for typo in dist - Release bump - Resolves: CVE-2026-4111 - Resolves: CVE-2025-5914 - Resolves: CVE-2025-25724 - Fix for CVE-2024-57970 - Resolves: RHEL-79877 - Resolves: CVE-2026-4424 - Release bump for typo in dist - Release bump - Resolves: CVE-2026-4111 - Resolves: CVE-2025-5914 - Resolves: CVE-2025-25724 - Fix for CVE-2024-57970 - Resolves: RHEL-79877 - Rebase to version 3.7.7 - Fixing SAST issues, accepted by upstream - Resolves: RHEL-39391 RHEL-67895 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix CVE-2024-48957 - Resolves: RHEL-62015 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebase to latest version (rhbz#2258293) - Backporting Georgian language for RHEL10 until next release of attr - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186128) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update license expression. - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - New upstream release - Drop patches merged upstream - Add builddep on python3-setuptools for Python 3.12+ - use sysuser setting for uuidd - Fix heap buffer overread in setpwnam() [CVE-2025-14104] - libfdisk: fix off-by-one in maximum last sector calculation - mount: improve --all documentation - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical - libblkid: use snprintf() instead of sprintf() - lscpu: Add NVIDIA Olympus arm64 core - libfdisk: improve collision reporting - libfdisk: (dos) ignore incomplete EBR for non-wholedisk - wall: always use utmp as fallback - lscpu: update table with ARM IDs - coresched: backport new tool to RHEL-10 - agetty: fix stdin conversion to tty name - blkid: allow up to 64k erofs block sizes - more(1): make sure we have data on stderr - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.5.0 - Bump release for June 2024 mass rebuild - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update overall license - Remove const-cstr dependency (RHBZ#2214208) - Update to 1.3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - Rebuild with LLVM 21 (RHEL-108333) - Rebuild in a side-tag - Rebase to version 0.35.0 (RHEL-79002) - Fix bpf-ksnoop (RHEL-93852) - Fix bpf-javagc (RHEL-75531) - Fix bio* tools tracepoints (RHEL-99677) - Rebase to the latest version (RHEL-78921) - Rebuild with LLVM 20 (RHEL-81772) - Silence warning of trace tools (RHEL-68952) - Fix bpf-runqlen (RHEL-91190) - Fix sslsniff and sofdsnoop (RHEL-58348) - Fix slabratetop (RHEL-58810) - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947) - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529) - Fix multiples ppc64 tools (RHEL-58147) - Rebase to the latest version (RHEL-63886) - Fix gating tests of libbpf gating. - Explicitely disable blazesym support (RHEL-65850) - Fix LLVM 19 build (RHEL-64925) - Remove python3-pyelftools dependency (RHEL-60064) - Add RHEL-only downstream patch to disable raid56 modes for now - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to version 6.12 - Resolves: rhbz#2329568 - Update to 6.11 Resolves: rhbz#2312879 - Update to version 6.10.1 - Resolves: rhbz#2305131 - Update to version 6.10 - Resolves: rhbz#2301782 - Update to 6.9.2 - Backport fix for Python 3.13 (rhbz#2245650) - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for Python 3.13 - Update to 6.9 - Add RHEL-only downstream patch to disable raid56 modes for now - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to version 6.12 - Resolves: rhbz#2329568 - Update to 6.11 Resolves: rhbz#2312879 - Update to version 6.10.1 - Resolves: rhbz#2305131 - Update to version 6.10 - Resolves: rhbz#2301782 - Update to 6.9.2 - Backport fix for Python 3.13 (rhbz#2245650) - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for Python 3.13 - Update to 6.9 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Upgrade to 1.5.6 (#2216132) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Upgrade to 1.5.6 (#2216132) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version - 2.10 (Vojtech Trefny) - Rename 'master' branch to 'main' (Vojtech Trefny) - remove dependency on python3-six and python2 crumbs (Alexandre Detiste) - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny) - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny) - dist: Fix release number in spec (Vojtech Trefny) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - New version - 2.9 (Vojtech Trefny) - build: Exit before AC_OUTPUT on error (Tomas Bzatek) - tests: fix locale tests on musl (triallax) - Update translation files (Weblate) - Translated using Weblate (Korean) (김인수) - ci: Manually prepare spec file for Packit (Vojtech Trefny) - Rebuilt for Python 3.12 - New version - 2.8 (Vojtech Trefny) - ci: Do not use release descriptions for Packit builds (Vojtech Trefny) - Do not hardcode pylint executable name in Makefile (Vojtech Trefny) - Remove unused test dependencies variables from Makefile (Vojtech Trefny) - docs: Remove information about Python 2 support (Vojtech Trefny) - Various docstring fixes (Vojtech Trefny) - Replace C++ style comments with C style (Vojtech Trefny) - Make use of error optional (Vojtech Trefny) - spec: Fix source archive URL (Vojtech Trefny) - ci: Add Packit automation for downstream builds (Vojtech Trefny) - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny) - ci: Use Packit for daily builds in Copr (Vojtech Trefny) - ci: Remove GitHub action for RPM builds (Vojtech Trefny) - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny) - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny) - ci: Update chroots for RPM builds (Vojtech Trefny) - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov) - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov) - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny) - Translated using Weblate (Georgian) (Temuri Doghonadze) - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny) - Added translation using Weblate (Georgian) (Temuri Doghonadze) - Update translation files (Weblate) - Translated using Weblate (Korean) (김인수) - ci: Update Fedora versions for RPM build tests (Vojtech Trefny) - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny) - ci: Update the csmock GitHub actions configuration (Vojtech Trefny) - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny) - Add a GitHub action for running csmock static analysis (Vojtech Trefny) - README: Remove the Travis CI badge (Vojtech Trefny) - Sync spec with downstream (Vojtech Trefny) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Sort certificates by ID - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - New upstream release - Fix UNKNOWN pkg-config version, rhbz#1989031 - Update to git snapshot v2.8.0.22 - Fix FTBFS rhbz#1987641 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Sort certificates by ID - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - New upstream release - Fix UNKNOWN pkg-config version, rhbz#1989031 - Update to git snapshot v2.8.0.22 - Fix FTBFS rhbz#1987641 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to the latest upstream version (RHEL-132576) - Add a weak dependency to intel-vsc-firmware - Drop the lttng-ust dependency - Disable tracing - Disable lc-compliance - Removed the gtest dependency from the libcamera-tools package - Resolves: RHEL-73503 - Update to 0.3.2 - Add Recommends: libcamera-ipa to the main package - Add patches to fix pipewire keeping UVC cameras open all the time causing significant laptop battery drain: https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669 - Enable simple pipeline everywhere - Update to 0.3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to the latest upstream version (RHEL-132576) - Add a weak dependency to intel-vsc-firmware - Drop the lttng-ust dependency - Disable tracing - Disable lc-compliance - Removed the gtest dependency from the libcamera-tools package - Resolves: RHEL-73503 - Update to 0.3.2 - Add Recommends: libcamera-ipa to the main package - Add patches to fix pipewire keeping UVC cameras open all the time causing significant laptop battery drain: https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669 - Enable simple pipeline everywhere - Update to 0.3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Drop the lttng-ust dependency - Disable tracing - Disable lc-compliance - Removed the gtest dependency from the libcamera-tools package - Resolves: RHEL-73503 - Update to 0.3.2 - Add Recommends: libcamera-ipa to the main package - Add patches to fix pipewire keeping UVC cameras open all the time causing significant laptop battery drain: https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669 - Enable simple pipeline everywhere - Update to 0.3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Add udev rules file, minor package cleanups - Rebuilt for Python 3.13 - Update to the latest upstream version (RHEL-132576) - Add a weak dependency to intel-vsc-firmware - Drop the lttng-ust dependency - Disable tracing - Disable lc-compliance - Removed the gtest dependency from the libcamera-tools package - Resolves: RHEL-73503 - Update to 0.3.2 - Add Recommends: libcamera-ipa to the main package - Add patches to fix pipewire keeping UVC cameras open all the time causing significant laptop battery drain: https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669 - Enable simple pipeline everywhere - Update to 0.3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to the latest upstream version (RHEL-132576) - Add a weak dependency to intel-vsc-firmware - Drop the lttng-ust dependency - Disable tracing - Disable lc-compliance - Removed the gtest dependency from the libcamera-tools package - Resolves: RHEL-73503 - Update to 0.3.2 - Add Recommends: libcamera-ipa to the main package - Add patches to fix pipewire keeping UVC cameras open all the time causing significant laptop battery drain: https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669 - Enable simple pipeline everywhere - Update to 0.3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to the latest upstream version (RHEL-132576) - Add a weak dependency to intel-vsc-firmware - Drop the lttng-ust dependency - Disable tracing - Disable lc-compliance - Removed the gtest dependency from the libcamera-tools package - Resolves: RHEL-73503 - Update to 0.3.2 - Add Recommends: libcamera-ipa to the main package - Add patches to fix pipewire keeping UVC cameras open all the time causing significant laptop battery drain: https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669 - Enable simple pipeline everywhere - Update to 0.3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to the latest upstream version (RHEL-132576) - Add a weak dependency to intel-vsc-firmware - Drop the lttng-ust dependency - Disable tracing - Disable lc-compliance - Removed the gtest dependency from the libcamera-tools package - Resolves: RHEL-73503 - Update to 0.3.2 - Add Recommends: libcamera-ipa to the main package - Add patches to fix pipewire keeping UVC cameras open all the time causing significant laptop battery drain: https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669 - Enable simple pipeline everywhere - Update to 0.3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to the latest upstream version (RHEL-132576) - Add a weak dependency to intel-vsc-firmware - Drop the lttng-ust dependency - Disable tracing - Disable lc-compliance - Removed the gtest dependency from the libcamera-tools package - Resolves: RHEL-73503 - Update to 0.3.2 - Add Recommends: libcamera-ipa to the main package - Add patches to fix pipewire keeping UVC cameras open all the time causing significant laptop battery drain: https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669 - Enable simple pipeline everywhere - Update to 0.3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Don't build GTK 2 bits on ELN/RHEL 10 as GTK 2 won't be there - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Don't build GTK 2 bits on ELN/RHEL 10 as GTK 2 won't be there - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Don't build GTK 2 bits on ELN/RHEL 10 as GTK 2 won't be there - Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878) Resolves: RHEL-169302 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove unwanted subpackage captree - Bump release for June 2024 mass rebuild - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>) - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>) - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>) - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>) - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Remove python bindings global exception handler - New upstream bugfix release - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed - Add function annotations to warn on unused results - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Remove python bindings global exception handler - New upstream bugfix release - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed - Add function annotations to warn on unused results - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - migrated to SPDX license, originally from Fedora by <msuchy> - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update license tag in subpackage to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for SPDX rebuild - Related: RHEL-119484 - debugfs: byteswap dirsearch dirent buf on big endian systems Resolves: RHEL-74431 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable metadata_csum_seed and orphan_file features in mke2fs.conf - Rebase to new upstream - Remove stale patch from the package - Bump release for June 2024 mass rebuild - Recommends: /usr/sbin/sendmail rather than sendmail as many packages can provide a /usr/sbin/sendmail command - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - RHEL-68430 texttopdf omits Chinese characters when creating PDF documents - RHEL-71935 Fix several important issues reported by OSH - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - RHEL-26148 - fix grayscale/color raster printing via AirPrint - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebuilt for side-tag with libppd - RHEL-214027 CVE-2026-64611 libcupsfilters: Fix infinite loop and empty device_ids in ieee1284 - RHEL-212655 CVE-2026-64612 libcupsfilters: Handle libpng errors via longjmp()/setjmp() to prevent process abort on malformed PNG - RHEL-68430 texttopdf omits Chinese characters when creating PDF documents - RHEL-71935 Fix several important issues reported by OSH - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - openssl: respect system crypto policy for TLS max version (RHEL-128916) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121672 - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966) (temporary revert to workaround another issue RHEL-85608) - new upstream release (RHEL-84132) - use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - correct indentation in test plan - fix libcurl and libcurl-minimal conflict in test plan (RHEL-52103) - add gating configuration (RHEL-52103) - sigpipe: init the struct so that first apply ignores (RHEL-53327) - new upstream release (RHEL-50806) - fix proxy environment variable change detection (CVE-2026-8927) - fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965) - fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783) - fix proxy connection reuse with wrong credentials (CVE-2026-3784) - fix SSH host key mismatch on type difference (CVE-2026-9547) - fix schemeless URL handling with --proto-default (CVE-2026-12064) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286) - openssl: fix CA cache reuse with CURLSSLOPT_NO_PARTIALCHAIN (CVE-2025-14819) - openssl: respect system crypto policy for TLS max version (RHEL-128916) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121672 - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966) (temporary revert to workaround another issue RHEL-85608) - new upstream release (RHEL-84132) - use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix cookie injection via trailing dot super cookies (CVE-2026-8924) - fix digest auth state leak on origin or credential change (CVE-2026-11856) - fix netrc password lookup for non-matching login (CVE-2026-8926) - fix proxy auth not cleared properly on NULL (CVE-2026-9079) - fix incomplete mTLS config in connection reuse and session cache (CVE-2026-8932) - fix SASL service name connection reuse bypass (CVE-2026-8458) - fix proxy environment variable change detection (CVE-2026-8927) - fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965) - fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783) - fix proxy connection reuse with wrong credentials (CVE-2026-3784) - fix SSH host key mismatch on type difference (CVE-2026-9547) - fix schemeless URL handling with --proto-default (CVE-2026-12064) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286) - openssl: fix CA cache reuse with CURLSSLOPT_NO_PARTIALCHAIN (CVE-2025-14819) - openssl: respect system crypto policy for TLS max version (RHEL-128916) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121672 - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966) (temporary revert to workaround another issue RHEL-85608) - new upstream release (RHEL-84132) - fix http2 stream dependency tracking security issue (CVE-2026-10536) - fix negotiate state check on connection reuse (CVE-2026-5545) - fix proxy auth not cleared on proxy change (CVE-2026-7168) - fix credentials not cleared on redirect (CVE-2026-6253) - fix HTTP credentials leak on cross-origin redirect (CVE-2026-6429) - fix cookie injection via trailing dot super cookies (CVE-2026-8924) - fix digest auth state leak on origin or credential change (CVE-2026-11856) - fix netrc password lookup for non-matching login (CVE-2026-8926) - fix proxy auth not cleared properly on NULL (CVE-2026-9079) - fix incomplete mTLS config in connection reuse and session cache (CVE-2026-8932) - fix SASL service name connection reuse bypass (CVE-2026-8458) - fix proxy environment variable change detection (CVE-2026-8927) - fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965) - fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783) - fix proxy connection reuse with wrong credentials (CVE-2026-3784) - fix SSH host key mismatch on type difference (CVE-2026-9547) - fix schemeless URL handling with --proto-default (CVE-2026-12064) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286) - openssl: fix CA cache reuse with CURLSSLOPT_NO_PARTIALCHAIN (CVE-2025-14819) - openssl: respect system crypto policy for TLS max version (RHEL-128916) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121672 - revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966) (temporary revert to workaround another issue RHEL-85608) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump version to 0.2.2 - Fix crash when hiding/showing - Bump version to 0.2.1 - Bump version to 0.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update libdex to 0.8.1 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Avoid asm.S usage on various Linux architectures - Update to libdex 0.6.1 - Add gating.yaml via API - Update to libdex 0.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.4.3 - Bump release for sidetag rebuild - Rebase to 0.2.0 Resolves: RHEL-73467 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Initial import (#2170328) - Update to 2.4.128-1 - Added amdgpu-slice.patch and amdgpu-fallback.patch - Update to 2.4.127 amdgpu-apu.patch: Read model name from /proc/cpuinfo for APUs - Update to 2.4.123 Resolves: https://issues.redhat.com/browse/RHEL-53895 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 2.4.121 - Fix findings from static application security testing (SAST) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - migrated to SPDX license, originally from Fedora by <msuchy> - Correct License: some files are GPL 2 or GPL 3, but not later - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rework the selection of functions to represent in BTF, for instance: - Skip functions that passes values thru the stack when those structs don't have expected alignment due to some attribute usage that then causes problems with BTF trampolines due to lack of expressiveness in BTF to signal such special cases. - Skip objects (compile units) without DWARF: don't stop a multi object encoding session just because one doesn't have any DWARF in it. - Fix BTF dedup by updating libbpf. - Fix the inference of the explicit alignment attribute of zero length arrays, like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no explicit alignment attribute encoding. - Fix the inference of alignments after bitfields, such as in struct nft_rule_dp->data[] after ->handle:42, also in the Linux kernel. - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct. - Add comparision of functions encoded in BTF between baseline 'master' branch and current branch, i.e. 'next'. - New release: 1.30 - Better detection of abort during DWARF loader thread processing - pahole now detects presence of libbpf APIs and BTF features using weak function declarations when built using a shared library libbpf - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature - New release: 1.29 - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads. - The BTF encoding now is always reproducible, and as fast/faster than before. - The memory consumption is reduced. - Support for multiple BTF_DECL_TAGs pointing to same tag. - Verify that pfunct prints btf_decl_tags read from BTF. - Don't print functions twice when using 'pfunct -f function_name'. - New release: 1.28 - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding. - Show flexible arrays statistics - Add '--padding N' and '--padding_ge N' to show structs with paddings - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel. - Don't stop pfunct output at the first function that matches a filter, show all of them - Allow encoding data about all global variables, not just per CPU ones - Handle .BTF_ids section endianness, fully supporting cross builds - Generate decl tags for bpf_fastcall for eligible kfuncs - Add "distilled_base" BTF feature to split BTF generation. - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var - Serialize access to elfutils dwarf_getlocation(). - Honour --lang_exclude when merging LTO built CUs. - Add the debuginfod client cache directory to the vmlinux search path. - Print the CU's language when a tag isn't supported. - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags. - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value - Introduce a tests/ directory with regression tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Backport upstream bugfixes for clang builds Resolves: RHEL-54228 - Resolves: RHEL-45148 - Add gating.yaml - Add "Provides: pahole" - New release: v1.26 - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too. - Print number of holes, bit holes and bit paddings in class member types. - Introduce --contains_enumerator=ENUMERATOR_NAME: - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum". - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF. - Fix loading DW_TAG_subroutine_type generated by the Go compiler. - Fix loading of 32-bit signed enums from BTF. - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding. - Parallelize loading BTF and DWARF, speeding up a bit btfdiff. - Do type expansion to cover "private" types and enumerations in btfdiff. - New release: v1.27 - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result. - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file. - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it. - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output. - Fix hole discovery with inheritance in C++. - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add riscv64 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add riscv64 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuild for Konflux (Resolves: RHEL-84822) - Test draft builds with composes - Drop unnecessary PVC - Bump release for final January Konflux build - Bump release for Konflux - Bump release for building in Konflux - Bump release for building in Konflux - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - make the build deterministic by serial make process - rebuild in Konflux - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version (20230828-3.1) - Drop unneeded strlcat patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - New version (20221030-3.1) - Update to 1.5.0 - Update to version 1.3.0 Resolves: RHEL-73468 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - libei 1.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Handle OEFFIS_DEVICE_ALL_DEVICES correctly - libei 1.2.0 - Update to 1.5.0 - Update to version 1.3.0 Resolves: RHEL-73468 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - libei 1.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Handle OEFFIS_DEVICE_ALL_DEVICES correctly - libei 1.2.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 0.62 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Change specfile to use SPDX identifier - Update to 0.61 - Update to 0.60 - Update to 0.59 - Update to 0.58 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Move away from xvfb-run Resolves: https://issues.redhat.com/browse/RHEL-36639 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration: license is already SPDX compatible - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Move away from xvfb-run Resolves: https://issues.redhat.com/browse/RHEL-36639 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration: license is already SPDX compatible - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add a rule to use Liberation Sans as a fallback of ArialMT. Resolves: rhbz#1490184 - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add a rule to use Liberation Sans as a fallback of ArialMT. Resolves: rhbz#1490184 - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add a rule to use Liberation Sans as a fallback of ArialMT. Resolves: rhbz#1490184 - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add a rule to use Liberation Sans as a fallback of ArialMT. Resolves: rhbz#1490184 - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add a rule to use Liberation Sans as a fallback of ArialMT. Resolves: rhbz#1490184 - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update License tag for SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration: licences is already SPDX compatible - BuildRequires python3-rpm-macros for pathfix.py and use the rpm macro - libevdev 1.13.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration: licences is already SPDX compatible - BuildRequires python3-rpm-macros for pathfix.py and use the rpm macro - libevdev 1.13.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Patch duplicate file descriptor manipulation - Resolves: RHEL-35256 - Bump release for June 2024 mass rebuild - Update license identifiers to SPDX in subpackages - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c - use autosetup - SPDX migration (Miroslav Suchý) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 2.1.13. - The following CVEs are fixed: - CVE-2026-63383 - CVE-2026-63384 - CVE-2026-63388 - CVE-2026-63387 - CVE-2026-63379 - CVE-2026-63381 - CVE-2026-63382 - CVE-2026-63385 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Patch duplicate file descriptor manipulation - Resolves: RHEL-35256 - Bump release for June 2024 mass rebuild - Update license identifiers to SPDX in subpackages - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c - use autosetup - SPDX migration (Miroslav Suchý) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 2.1.13. - The following CVEs are fixed: - CVE-2026-63383 - CVE-2026-63384 - CVE-2026-63388 - CVE-2026-63387 - CVE-2026-63379 - CVE-2026-63381 - CVE-2026-63382 - CVE-2026-63385 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix integer underflow in MakerNote decoding (CVE-2026-40386) Resolves: RHEL-170240 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to upstream release 2.3.1 - Resolves: RHEL-90255, RHEL-99199, RHEL-99208 - Update to upstream release 2.1.0 - Resolves: RHEL-73065 - Update to upstream release 1.22.0 - Resolves: RHEL-16844, RHEL-24119, RHEL-25795 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 1.20.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebase to 1.2304.0 (new release number scheme, now like rsyslog) Resolves: rhbz#2183193 - Address CVE-2020-12762 Resolves: rhbz#2203170 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448] - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448] - Resolves: RHEL-64318 ([RHEL10][CS10] dtc fails to build with Swig 4.3.0) - Resolves: RHEL-65448 ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix missing dynamic tags for aarch64 python3 pylibfdt - Resolves: RHEL-33493 (Annocheck FAIL: bind-now (dtc)) - Bump release for June 2024 mass rebuild - dtc-Properly-harden-built-packages.patch [RHEL-33493] - Resolves: RHEL-33493 (Annocheck FAIL: bind-now (dtc)) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Don't install a Python .egg - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Fix riscv64 build Resolves: RHEL-86095 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add missing declaration of open_temp_exec_file - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Enable static trampolines - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libfontenc 1.1.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libfontenc 1.1.6 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix remaining protection flags on shared object for Aarch64 - Fix CVE-2024-2236 (RHEL-58736) - Add CF protection on x86_64 - Clean up flags to pass rpminspect checks - Fix memory leaks reported by static analysis - New upstream release (#2293064) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release (#2249639) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext - Disable annocheck on riscv64 (fixes build) Resolves: RHEL-88837 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix remaining protection flags on shared object for Aarch64 - Fix CVE-2024-2236 (RHEL-58736) - Add CF protection on x86_64 - Clean up flags to pass rpminspect checks - Fix memory leaks reported by static analysis - New upstream release (#2293064) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Trigger Vala compilation during build, for GCC 14 compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild (exiv2) Resolves: RHEL-52972 - Update to 0.14.3 Resolves: RHEL-46522 - Drop the python3 sub-package Resolves: RHEL-45529 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.14.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Move away from xvfb-run - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX license update - Update to 1.7.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.6.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Move away from xvfb-run - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX license update - Update to 1.7.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.6.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Move away from xvfb-run - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX license update - Update to 1.7.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.6.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Move away from xvfb-run - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX license update - Update to 1.7.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.6.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Move away from xvfb-run - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX license update - Update to 1.7.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.6.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Move away from xvfb-run - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX license update - Update to 1.7.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.6.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Move away from xvfb-run - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX license update - Update to 1.7.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.6.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - New upstream release (#2293052) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - New upstream release (#2184969) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - fix bluetooth issue with libmtp (RHEL-141270) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 2.1.3 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.1 - Update to 2.02 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 2.1.3 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.1 - Update to 2.02 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 2.1.3 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.1 - Update to 2.02 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 2.1.3 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.1 - Update to 2.02 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc() - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter() - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - Bump release for June 2024 mass rebuild - RHEL-38835 run the package with correct tests - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Synchronize to packaging changes in Fedora 40: Resolves: RHEL-66920 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building against libxml 2.12.0 - Use pkgconfig for BuildRequires - New upstream release 1.14.51 - Resolves: rhbz#2214335 rhbz#2249742 rhbz#2249979 - Add MinGW packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Port configure script to C99 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.41.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.41.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 238 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Enable building for ppc64le - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Update to libguestfs-1.58.1-6 - daemon/listfs.ml: ignore CHS geometry error from parted (Veritas/Sun) - daemon: allow base64:/text: prefixes on Key parameters (binary LUKS keys) - daemon: move read_whole_file to common/utils and rewrite luks_* APIs in OCaml - Update common submodule - Apply patches with %autosetup -S git (a patch now adds binary test data) - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - Enable building for ppc64le - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Enable building for ppc64le - Add setfiles optional excludes parameter to libguestfs resolves: RHEL-239808 - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Enable building for ppc64le - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Update to libguestfs-1.58.1-6 - daemon/listfs.ml: ignore CHS geometry error from parted (Veritas/Sun) - daemon: allow base64:/text: prefixes on Key parameters (binary LUKS keys) - daemon: move read_whole_file to common/utils and rewrite luks_* APIs in OCaml - Update common submodule - Apply patches with %autosetup -S git (a patch now adds binary test data) - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - Enable building for ppc64le - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Enable building for ppc64le - Add setfiles optional excludes parameter to libguestfs resolves: RHEL-239808 - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Enable building for ppc64le - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Update to libguestfs-1.58.1-6 - daemon/listfs.ml: ignore CHS geometry error from parted (Veritas/Sun) - daemon: allow base64:/text: prefixes on Key parameters (binary LUKS keys) - daemon: move read_whole_file to common/utils and rewrite luks_* APIs in OCaml - Update common submodule - Apply patches with %autosetup -S git (a patch now adds binary test data) - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - Enable building for ppc64le - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Enable building for ppc64le - Add setfiles optional excludes parameter to libguestfs resolves: RHEL-239808 - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Enable building for ppc64le - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Update to libguestfs-1.58.1-6 - daemon/listfs.ml: ignore CHS geometry error from parted (Veritas/Sun) - daemon: allow base64:/text: prefixes on Key parameters (binary LUKS keys) - daemon: move read_whole_file to common/utils and rewrite luks_* APIs in OCaml - Update common submodule - Apply patches with %autosetup -S git (a patch now adds binary test data) - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - Enable building for ppc64le - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Enable building for ppc64le - Add setfiles optional excludes parameter to libguestfs resolves: RHEL-239808 - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Enable building for ppc64le - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Update to libguestfs-1.58.1-6 - daemon/listfs.ml: ignore CHS geometry error from parted (Veritas/Sun) - daemon: allow base64:/text: prefixes on Key parameters (binary LUKS keys) - daemon: move read_whole_file to common/utils and rewrite luks_* APIs in OCaml - Update common submodule - Apply patches with %autosetup -S git (a patch now adds binary test data) - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - Enable building for ppc64le - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Enable building for ppc64le - Add setfiles optional excludes parameter to libguestfs resolves: RHEL-239808 - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Enable building for ppc64le - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Update to libguestfs-1.58.1-6 - daemon/listfs.ml: ignore CHS geometry error from parted (Veritas/Sun) - daemon: allow base64:/text: prefixes on Key parameters (binary LUKS keys) - daemon: move read_whole_file to common/utils and rewrite luks_* APIs in OCaml - Update common submodule - Apply patches with %autosetup -S git (a patch now adds binary test data) - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - Enable building for ppc64le - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Enable building for ppc64le - Add setfiles optional excludes parameter to libguestfs resolves: RHEL-239808 - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Requires fuse-libs resolves: RHEL-46563 - Try to fix libvirt in the gating test. - Import package into CentOS Stream 10 - Remove resolves refs to work around check-gitbz bug (RHELBLD-14966) - Add gating tests - Set ExclusiveArch/ExcludeArch to the same as for libguestfs - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves rhbz#2236376 - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Enable building for ppc64le - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Update to libguestfs-1.58.1-6 - daemon/listfs.ml: ignore CHS geometry error from parted (Veritas/Sun) - daemon: allow base64:/text: prefixes on Key parameters (binary LUKS keys) - daemon: move read_whole_file to common/utils and rewrite luks_* APIs in OCaml - Update common submodule - Apply patches with %autosetup -S git (a patch now adds binary test data) - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - Enable building for ppc64le - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Enable building for ppc64le - Add setfiles optional excludes parameter to libguestfs resolves: RHEL-239808 - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Epoch needs to be added to the devel package requirement - Remove epoch from devel requirements - Add epoch to fix upgrades and update to 4.4.4 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Resolves: RHEL-30234 (Update to 4.4.2 release) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Unretire libgweather package, rename libgweather4 back to libgweather - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Move away from xvfb-run (done by nielsdg@redhat.com in Fedora) - Bump release for June 2024 mass rebuild - Update to 1.8.3 - Re-enable tests on s390x - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Backport an upstream patch to fix a write after free issue (rhbz#2253814) - Disable glade catalog in RHEL builds - BR: rsvg-pixbuf-loader for svg support in tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Do not run modprobe in %post if the system is not running - Resolves: RHEL-78695 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix SPDX license identifiers - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Resolves: RHEL-32074 (Update to 3.0.18) - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.0.17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for ICU 73.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Resolves: RHEL-32074 (Update to 3.0.18) - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.0.17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for ICU 73.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96667 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-59365 Fix coverity warnings - Bump release for June 2024 mass rebuild - Update to 74.2 - Update to 74.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix broken TestHebrewCalendarInTemporalLeapYear - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Upgrade to 2.3.7 (#2260623) - Upgrade to 2.3.6 - Upgrade to 2.3.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - change license tag to SPDX format (RHEL-52832) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - change license tag to SPDX format (RHEL-52832) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fix FTBFS with GCC 14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libinput 1.30.1 Resolves: RHEL-136390 - libinput 1.28.1 Resolves: RHEL-126613 - Add quirks for four Dell pressure pads (RHEL-106932) - Fix negative value range for the dial to ring-mapping (RHEL-104952) - Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - libinput 1.26.1 - Bump release for June 2024 mass rebuild - libinput 1.26.0 - Mark datadir/libinput as owned by us (#2283754) - CVE-2026-50292: sanitize phys before printing it in libinput-device-group Resolves: RHEL-182371 - libinput 1.30.1 Resolves: RHEL-136390 - libinput 1.28.1 Resolves: RHEL-126613 - Add quirks for four Dell pressure pads (RHEL-106932) - Fix negative value range for the dial to ring-mapping (RHEL-104952) - Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - libinput 1.26.1 - Bump release for June 2024 mass rebuild - libinput 1.30.1 Resolves: RHEL-136390 - libinput 1.28.1 Resolves: RHEL-126613 - Add quirks for four Dell pressure pads (RHEL-106932) - Fix negative value range for the dial to ring-mapping (RHEL-104952) - Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - libinput 1.26.1 - Bump release for June 2024 mass rebuild - libinput 1.26.0 - Mark datadir/libinput as owned by us (#2283754) - CVE-2026-50292: sanitize phys before printing it in libinput-device-group Resolves: RHEL-182371 - libinput 1.30.1 Resolves: RHEL-136390 - libinput 1.28.1 Resolves: RHEL-126613 - Add quirks for four Dell pressure pads (RHEL-106932) - Fix negative value range for the dial to ring-mapping (RHEL-104952) - Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - libinput 1.26.1 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable python support. This package is only in RHEL 10, because tracker-miners requires it and it doesn't need the Python bits. - Resolves: RHEL-52843 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Upgrade to 1.5.6 (#2216134) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Upgrade to 1.5.6 (#2216134) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Upgrade to 1.5.6 (#2216133) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Upgrade to 1.5.6 (#2216133) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Rebase jose-14 upstream version to c10s - Enable fmf metadata format for jose - Enable RHEL gating for jose - Update to release v12 - Fix test when using zlib-ng - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Set fp-contract for riscv64 - New upstream release 3.0.2 (Fixes RHBZ#2256228 and RHBZ#2166459 and RHBZ#2208448) - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Set fp-contract for riscv64 - New upstream release 3.0.2 (Fixes RHBZ#2256228 and RHBZ#2166459 and RHBZ#2208448) - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Set fp-contract for riscv64 - New upstream release 3.0.2 (Fixes RHBZ#2256228 and RHBZ#2166459 and RHBZ#2208448) - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebase to upstream 0.5.5 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add tests/ directory - Add gating.yaml to RHEL10 libkdumpfile - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - More complete Python 3 port for improved C compatibility - Update to 0.5.4 - Update to 0.5.3 - Rebase to upstream 0.5.5 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add tests/ directory - Add gating.yaml to RHEL10 libkdumpfile - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - More complete Python 3 port for improved C compatibility - Update to 0.5.4 - Update to 0.5.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - License review: SPDX migration not necessary - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Initial commit on c10s - Resolves: RHEL-139928 - Rebase to 1.1.3 Resolves: RHEL-127169 - Bump release for CRB inclusion Resolves: RHEL-96893 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Review fixes - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Allow dropping empty json objects Resolves: RHEL-39979 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Port pcre dependency to pcre2 resolves: rhbz#2128320 - Update License tag for SPDX - Apache 2.0 was missing according to upstream sources - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix configure.ac/configure glitch (#2141801) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Allow dropping empty json objects Resolves: RHEL-39979 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Port pcre dependency to pcre2 resolves: rhbz#2128320 - Update License tag for SPDX - Apache 2.0 was missing according to upstream sources - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix configure.ac/configure glitch (#2141801) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Hardlink, rather than symlink, duplicate table files - Fix RHEL build after RPATH removal - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.28.0 - Install internal.h for MuseScore - Drop ancient obsoletes - Build the python package with dist-info - Add tables subpackage for the noarch data - Complete and correct SPDX migration - Remove need for chrpath - Minor spec file cleanups - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 3.25.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Hardlink, rather than symlink, duplicate table files - Fix RHEL build after RPATH removal - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.28.0 - Install internal.h for MuseScore - Drop ancient obsoletes - Build the python package with dist-info - Add tables subpackage for the noarch data - Complete and correct SPDX migration - Remove need for chrpath - Minor spec file cleanups - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 3.25.0 - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Align to upstream release 10 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Enable fmf init for luksmeta - Enable RHEL gating for jose - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Upgrade to 1.9.1 (#2257602) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Upgrade to 1.8.0 (#2248696) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 1:1.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license format - Update to 1:0.9.77 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1:0.9.76 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - use sysuser setting for uuidd - Fix heap buffer overread in setpwnam() [CVE-2025-14104] - libfdisk: fix off-by-one in maximum last sector calculation - mount: improve --all documentation - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical - libblkid: use snprintf() instead of sprintf() - lscpu: Add NVIDIA Olympus arm64 core - libfdisk: improve collision reporting - libfdisk: (dos) ignore incomplete EBR for non-wholedisk - wall: always use utmp as fallback - lscpu: update table with ARM IDs - coresched: backport new tool to RHEL-10 - agetty: fix stdin conversion to tty name - blkid: allow up to 64k erofs block sizes - more(1): make sure we have data on stderr - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Upgrade to libmpc version 1.3.1 (rhbz#2154360) - Upgrade to libmpc version 1.3.0 (rhbz#2152180) - Convert License tags to SPDX - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Upgrade to libmpc version 1.3.1 (rhbz#2154360) - Upgrade to libmpc version 1.3.0 (rhbz#2152180) - Convert License tags to SPDX - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Disable player match that breaks Bluetooth on Mediatek MT7925 adapters (RHEL-116829) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to libnbd 1.24.1 resolves: RHEL-111243 - Synch spec file with Fedora - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution resolves: RHEL-129296 - Implement Post-Quantum Cryptography (PQC) resolves: RHEL-101267 - Rebase to libnbd 1.24.1 resolves: RHEL-111243 - Synch spec file with Fedora - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution resolves: RHEL-129296 - Implement Post-Quantum Cryptography (PQC) resolves: RHEL-101267 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - applied patch to fix static analysis errors https://github.com/libnet/libnet/pull/170 - copy gating.yaml from c9s - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - new version - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135) - Spec bump (RHEL-103655) - PQC: make X25519MLKEM768 the default TLS key exchange group in nghttpd and nghttpx (RHEL-103655) - update to the latest upstream release (RHEL-143723) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - update to the latest upstream release - update to the latest upstream release - update to the latest upstream release - Bump release for June 2024 mass rebuild - update to the latest upstream release - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055) - fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135) - Spec bump (RHEL-103655) - PQC: make X25519MLKEM768 the default TLS key exchange group in nghttpd and nghttpx (RHEL-103655) - update to the latest upstream release (RHEL-143723) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - update to the latest upstream release - update to the latest upstream release - Update to 3.11.0 release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.9.0 release - Use SPDX license identifier in package - Update to 3.8.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use SPDX license identifier in package - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for gcr soname bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.10.6 release - Update to 1.10.4 release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use SPDX license identifier in package - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for gcr soname bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.10.6 release - Update to 1.10.4 release - Update to 0.8.6 Resolves: RHEL-88017 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL. As it was used to build the man page, add the man page in the native format. - Resolves: RHEL-45565 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.8.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 0.8.6 Resolves: RHEL-88017 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL. As it was used to build the man page, add the man page in the native format. - Resolves: RHEL-45565 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.8.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.5.0 - Update to version 1.3.0 Resolves: RHEL-73468 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - libei 1.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Handle OEFFIS_DEVICE_ALL_DEVICES correctly - libei 1.2.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove outdated Requires: gtk2 for the pixbuf-loader (RHEL-45169) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Avoid unresolved symbols when compiled with OQS_DLOPEN_OPENSSL Resolves: RHEL-75157 - Rebasing to liboqs-0.12.0 Resolves: RHEL-65426 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Restoring ML-KEM-512 built out by accident Resolves: RHEL-64284 - Removing Falcon from supported algorithms Related: RHEL-56152 - Update to 0.11.0 version Resolves: RHEL-56152 - Rebase to 0.10.1 version (CVE-2024-36405) Resolves: RHEL-40699 - Use dlopen for OpenSSL algos implementation Resolves: RHEL-46598 - Correct license naming Resolves: RHEL-45265 - Bump release for June 2024 mass rebuild - Update to 0.9.2 version - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Avoid unresolved symbols when compiled with OQS_DLOPEN_OPENSSL Resolves: RHEL-75157 - Rebasing to liboqs-0.12.0 Resolves: RHEL-65426 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Restoring ML-KEM-512 built out by accident Resolves: RHEL-64284 - Removing Falcon from supported algorithms Related: RHEL-56152 - Update to 0.11.0 version Resolves: RHEL-56152 - Rebase to 0.10.1 version (CVE-2024-36405) Resolves: RHEL-40699 - Use dlopen for OpenSSL algos implementation Resolves: RHEL-46598 - Correct license naming Resolves: RHEL-45265 - Bump release for June 2024 mass rebuild - Update to 0.9.2 version - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix build with libxml2-2.12.0 - Fix rpmautospec changelog - Update to release v1.11.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use libsoup 3 in ELN - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license format - Update to 0.9.16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.8.1 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.4.1 - Update to 1.4.0 - Update to 1.3.1 - Update to 1.3.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - remove gnulib dependency and use bundled one - RHEL-33500 - apply hardening ldflags for localepaper - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2.1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - update to 2.1.0 - update to 2.0.10 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add gating.yaml - Fix findings from static application security testing (SAST) Resolves: https://issues.redhat.com/browse/RHEL-29742 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Disable glade catalog in RHEL builds - Fix obsoletes and provides - Initial version - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Disable glade catalog in RHEL builds - Fix obsoletes and provides - Initial version - Add libpfm-ibm-counters.patch - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix gcc-14 -Werror=calloc-transposed-args compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add libpfm-monaka.patch - Add libpfm-monaka-v1.1.patch - Add libpfm-ibm-counters.patch - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add libpfm-ibm-counters.patch - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix gcc-14 -Werror=calloc-transposed-args compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add libpfm-monaka.patch - Add libpfm-monaka-v1.1.patch - Add libpfm-ibm-counters.patch - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for Konflux (Resolves: RHEL-84822) - Test draft builds with composes - Drop unnecessary PVC - Bump release for final January Konflux build - Bump release for Konflux - Bump release for building in Konflux - Bump release for building in Konflux - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - make the build deterministic by serial make process - rebuild in Konflux - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix flatpak build - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - BR on libxml2 - Update to 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix flatpak build - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - BR on libxml2 - Update to 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Switch to use Kyoto Cabinet - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 2.8.1 - bug fixes - Update to 2.8.0 - bug fixes for ARMv7 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Switch to use Kyoto Cabinet - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 2.8.1 - bug fixes - Update to 2.8.0 - bug fixes for ARMv7 - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161329) - fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161213) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148328) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650) - CVE-2025-64720: buffer overflow (RHEL-131432) - CVE-2025-65018: heap buffer overflow (RHEL-131445) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebuild for rerunning tests - fix hardening on aarch64 - fix static analysis findings (RHEL-44993) - Bump release for June 2024 mass rebuild - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148328) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650) - CVE-2025-64720: buffer overflow (RHEL-131432) - CVE-2025-65018: heap buffer overflow (RHEL-131445) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebuild for rerunning tests - fix hardening on aarch64 - fix static analysis findings (RHEL-44993) - Bump release for June 2024 mass rebuild - Rebuild (qt6) Resolves: RHEL-109197 - Rebuild (qt6) Resolves: RHEL-95936 - Update to 0.9.0 Resolves: RHEL-72805 - Rebuild (qt6) Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.8.1 and build Qt 6 bindings Resolves: RHEL-60817 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild (qt6) Resolves: RHEL-109197 - Rebuild (qt6) Resolves: RHEL-95936 - Update to 0.9.0 Resolves: RHEL-72805 - Rebuild (qt6) Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.8.1 and build Qt 6 bindings Resolves: RHEL-60817 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild (qt6) Resolves: RHEL-109197 - Rebuild (qt6) Resolves: RHEL-95936 - Update to 0.9.0 Resolves: RHEL-72805 - Rebuild (qt6) Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.8.1 and build Qt 6 bindings Resolves: RHEL-60817 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild (qt6) Resolves: RHEL-109197 - Rebuild (qt6) Resolves: RHEL-95936 - Update to 0.9.0 Resolves: RHEL-72805 - Rebuild (qt6) Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.8.1 and build Qt 6 bindings Resolves: RHEL-60817 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - RHEL-71942 Fix several important issues reported by OSH - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52980 fix deciding page sizes by changing delta for difference - RHEL-25803 libppd - backport fix for PWG printer support - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2240389 - libppd-2.0.0 is available - CVE-2023-4504 libppd: Postscript Parsing Heap Overflow - Release bump - Rebase to upstream release 16.11 - Bump release for rebuild - Update to 16.8 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable openssl ENGINE_API - Bump release for June 2024 mass rebuild - Ship errcodes.h in -devel package (kea package requires errorcodes) - Backport OpenSSL 3.2 fix from upstream master - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to upstream release 16.14 - Resolves: RHEL-192240 - Release bump - Rebase to upstream release 16.11 - Bump release for rebuild - Update to 16.8 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml - Update to 0.5.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Install a versioned library symlink (#2247508) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 0.5.3 - Update to 0.5.2 - Bump release for October 2024 mass rebuild: - enable c10s gating - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.21.5 - migrate to SPDX license format - the old and new license tags are identical, this changelog entry just indicates that it was checked to be correct - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for libunistring-1.1 - Mark psl-make-dafsa noarch - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update doxygen2man for latest libXML2 - include parser.h - rebase to v2.0.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - rebase to v2.0.7 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - update to 0.14.0 - fix rpminspect rpmdeps - fix gating-yaml-checks Related: RHEL-31259 - Resolves: RHEL-31259, Conditionally enable SSL engine APIs - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - fix security issue, CVE-2023-35789 - update to 0.13.0 - drop patches merged upstream - update to 0.12.0 - add patch to not install the static library, from https://github.com/alanxz/rabbitmq-c/pull/749 - add patch to fix version in pkgconfig file, from https://github.com/alanxz/rabbitmq-c/pull/751 - Resolves: RHEL-266738, CVE-2026-44236 Heap buffer overflow leading to denial of service - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - update to 0.14.0 - fix rpminspect rpmdeps - fix gating-yaml-checks Related: RHEL-31259 - Resolves: RHEL-31259, Conditionally enable SSL engine APIs - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - fix security issue, CVE-2023-35789 - update to 0.13.0 - drop patches merged upstream - update to 0.12.0 - add patch to not install the static library, from https://github.com/alanxz/rabbitmq-c/pull/749 - add patch to fix version in pkgconfig file, from https://github.com/alanxz/rabbitmq-c/pull/751 - Resolves: RHEL-266738, CVE-2026-44236 Heap buffer overflow leading to denial of service - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add support for riscv64 - gcc-14 - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm - ceph-18.2.1 GA - ceph-18.2.0 GA - ceph-18.1.3 RC4, rebuild with libarrow-13.0.0 - ceph-18.1.3 RC4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - revert python3-Cython -> python3dist(cython) < 3~~ - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - with python3-Cython -> python3dist(cython) < 3~~ - Rebuilt for ICU 73.2 - Add support for riscv64 - gcc-14 - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm - ceph-18.2.1 GA - ceph-18.2.0 GA - ceph-18.1.3 RC4, rebuild with libarrow-13.0.0 - ceph-18.1.3 RC4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - revert python3-Cython -> python3dist(cython) < 3~~ - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - with python3-Cython -> python3dist(cython) < 3~~ - Rebuilt for ICU 73.2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Disable building with openssl engine support resolves: RHEL-33739 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebase to latest upstream version resolves: rhbz#1947184 - Update License tag for SPDX - Upstream sources claim that the Apache 2.0 is used - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild Resolves: RHEL-54298 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - rebase to 1.11.0 resolves: rhbz#2159703 - enable openssl - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release number - ikev2: use nonces to tie-break simultaneous IKE - CI: Update CI plan url - Subpackage minimal set of daemons into -minimal - pluto: reject crossing IKE_AUTH request only for the one side - helpers: work around NSS by joining helper threads - ikev2: reject simultaneous IKE_AUTH requests - Update to libreswan-5.3 - ipsec delete: expect no IKE only for orphan child - Update to libreswan 5.2 - Update to libreswan-5.3.2 - Update to libreswan-5.3.1 - Bump release number - ikev2: use nonces to tie-break simultaneous IKE - CI: Update CI plan url - Subpackage minimal set of daemons into -minimal - pluto: reject crossing IKE_AUTH request only for the one side - helpers: work around NSS by joining helper threads - ikev2: reject simultaneous IKE_AUTH requests - Update to libreswan-5.3 - Bump release number - ikev2: use nonces to tie-break simultaneous IKE - CI: Update CI plan url - Subpackage minimal set of daemons into -minimal - pluto: reject crossing IKE_AUTH request only for the one side - helpers: work around NSS by joining helper threads - ikev2: reject simultaneous IKE_AUTH requests - Update to libreswan-5.3 - ipsec delete: expect no IKE only for orphan child - Update to libreswan 5.2 - Update to libreswan-5.3.2 - Update to libreswan-5.3.1 - Bump release number - ikev2: use nonces to tie-break simultaneous IKE - CI: Update CI plan url - Subpackage minimal set of daemons into -minimal - pluto: reject crossing IKE_AUTH request only for the one side - helpers: work around NSS by joining helper threads - ikev2: reject simultaneous IKE_AUTH requests - Update to libreswan-5.3 - Fix FTBFS by updating time crate - Bump release for October 2024 mass rebuild: - Backport a patch from rawhide disabling broken tests - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.57.1 - Fix RHEL build - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities - Fix FTBFS by updating time crate - Bump release for October 2024 mass rebuild: - Fix FTBFS by updating time crate - Bump release for October 2024 mass rebuild: - Backport a patch from rawhide disabling broken tests - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.57.1 - Fix RHEL build - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities - Fix FTBFS by updating time crate - Bump release for October 2024 mass rebuild: - Fix FTBFS by updating time crate - Bump release for October 2024 mass rebuild: - Backport a patch from rawhide disabling broken tests - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.57.1 - Fix RHEL build - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities - Fix FTBFS by updating time crate - Bump release for October 2024 mass rebuild: - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fix FTBFS - applied accepted license exception - SANE-exception - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - move to meson - 2165612 - IPP-USB as a weak dependency of CUPS and sane-airscan - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - RHEL-102977 rpm -q --changelog hplip no longer lists changelog - enable following links with curl in all use cases Resolves: RHEL-84817 - hp-plugin-download wrongly parsed file type Resolves: RHEL-97437 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - RHEL-35696 Remove/migrate additional license tags - RHEL-29931 hp-plugin-download uses removed curl option - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - add fallback url to hp-plugin-download - 2252302 - hplip-3.23.12 is available - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - RHEL-102977 rpm -q --changelog hplip no longer lists changelog - enable following links with curl in all use cases Resolves: RHEL-84817 - hp-plugin-download wrongly parsed file type Resolves: RHEL-97437 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix LEDM scanner regression - fix OSH issues - Create right dir - RHEL-266547 [IMAGE-MODE] missing /var/lib/hp on image-mode - Rebase to 3.26.6 - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Bump release to address sbc-devel inclusion to CRB Resolves: RHEL-105436 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Upgrade to version 2.5.6. Resolves: RHEL-80090 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Backport packaging of mock service from Fedora in order to consume it in EPEL Resolves: RHEL-81780 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix SDPX license - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use GnuTLS as the default crypto backend - Update to 0.21.2 - Update to 0.21.1 - Update to 0.21.0 - Backport packaging of mock service from Fedora in order to consume it in EPEL Resolves: RHEL-81780 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix SDPX license - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use GnuTLS as the default crypto backend - Update to 0.21.2 - Update to 0.21.1 - Update to 0.21.0 - SELinux userspace 3.10 release - restorecon: Add option to count relabeled files (RHEL-144056) - Rebuild to accomodate changes in swig (RHEL-118812) - Ignore files removed during relabeling (RHEL-110181) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - Prioritize local literal fcontext definitions (rhbz#2360183) - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - libselinux/utils: drop reachable assert in sefcontext_compile - SELinux userspace 3.10 release - restorecon: Add option to count relabeled files (RHEL-144056) - Rebuild to accomodate changes in swig (RHEL-118812) - Ignore files removed during relabeling (RHEL-110181) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - Prioritize local literal fcontext definitions (rhbz#2360183) - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - libselinux/utils: drop reachable assert in sefcontext_compile - SELinux userspace 3.10 release - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.8-rc1 release - cil: Check that sym_index is within bounds (RHEL-34823) - cil: Initialize avtab_datum on declaration (RHEL-34810) - mls: Do not destroy context on memory error (RHEL-34810) - cil/cil_post: Initialize tmp on declaration (RHEL-34810) - Initialize "strs" on declaration (RHEL-34810) - Bump release for October 2024 mass rebuild (RHEL-64018) - sepol_compute_sid: Do not destroy uninitialized context (RHEL-34808) - SELinux userspace 3.7 release - SELinux userspace 3.10 release - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.8-rc1 release - cil: Check that sym_index is within bounds (RHEL-34823) - cil: Initialize avtab_datum on declaration (RHEL-34810) - mls: Do not destroy context on memory error (RHEL-34810) - cil/cil_post: Initialize tmp on declaration (RHEL-34810) - Initialize "strs" on declaration (RHEL-34810) - Bump release for October 2024 mass rebuild (RHEL-64018) - sepol_compute_sid: Do not destroy uninitialized context (RHEL-34808) - SELinux userspace 3.7 release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add linking of gssapi to support Kerberos authentication - Resolves: rhbz#2245095 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.3.10 - Resolves: rhbz#2211498 - Change the License tag to the SPDX format - Fix testsuite - Resolves: rhbz#2166252 - Fix multihome server handling and backport cmake support - Related: rhbz#1130328 - Update to 1.4.328.1 SDK - Update to SDK v1.4.313.0 - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Update to 1.3.280.0 SDK - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixed devel subpackage SPDX license Related: RHEL-35719 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Converted license tag to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update libshout to 2.4.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.6.0 - Fix NEWS file to not be executable - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 3.4.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Backport "ip: Enforce strict aliasing" patch - Fixes: RHEL-40593 - rebuild - Related: RHEL-39410 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - move yang files to avoid conflict with frr (#RHEL-43428) - Bump release for June 2024 mass rebuild - reduce build parallelism, too much breaks the build - fix license field (#RHEL-36338) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - C type-safety level downgrade due to pointer/int conversion bugs (#2256912) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to the latest available source tree, cleanup as much as we can - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - apply patch for CVE-2026-37555 Resolves: RHEL-174531 - change the license to LGPL-2.1 OR LGPL-3.0 (#RHEL-85333) - fix crash in ogg vorbis (#RHEL-65092) (CVE-2024-50612) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - apply patch for CVE-2026-37555 Resolves: RHEL-174531 - change the license to LGPL-2.1 OR LGPL-3.0 (#RHEL-85333) - fix crash in ogg vorbis (#RHEL-65092) (CVE-2024-50612) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add patches for CVE-2026-4271 and CVE-2026-5119 - Add patch for CVE-2026-1761 - Fix CVE-2026-0719 - Fix CVE-2025-14523 - Add patch for CVE-2025-12105 - Fix integer overflow in date/time parsing - Bump revision number - Fix several CVEs - Add patch to hopefully fix http2-body-size-test timeouts - Add patch to hopefully fix server-test timeouts - Fix CVE-2026-85197: http2 crash after connection destroyed - Fix CVE-2026-15711: Reject oversized WebSocket control frames - Fix CVE-2026-15709: bound decompressed WebSocket message size - Add patches for CVE-2026-4271 and CVE-2026-5119 - Add patch for CVE-2026-1761 - Fix CVE-2026-0719 - Fix CVE-2025-14523 - Add patch for CVE-2025-12105 - Fix integer overflow in date/time parsing - Bump revision number - CVE-2026-102557 libsoup3: libsoup: Heap buffer overflow during WebSocket message reassembly - CVE-2026-102556 libsoup3: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion - CVE-2026-102558 libsoup3: libsoup: Heap buffer overflow during WebSocket receive-buffer growth - CVE-2026-102555 libsoup3: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding - CVE-2026-102560 libsoup3: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth - CVE-2026-102559 libsoup3: libsoup: Heap buffer overflow during WebSocket client-frame masking - Fix CVE-2026-85197: http2 crash after connection destroyed - Fix CVE-2026-15711: Reject oversized WebSocket control frames - Fix CVE-2026-15709: bound decompressed WebSocket message size - Add patches for CVE-2026-4271 and CVE-2026-5119 - Add patches for CVE-2026-4271 and CVE-2026-5119 - Add patch for CVE-2026-1761 - Fix CVE-2026-0719 - Fix CVE-2025-14523 - Add patch for CVE-2025-12105 - Fix integer overflow in date/time parsing - Bump revision number - Fix several CVEs - Add patch to hopefully fix http2-body-size-test timeouts - Add patch to hopefully fix server-test timeouts - Fix CVE-2026-85197: http2 crash after connection destroyed - Fix CVE-2026-15711: Reject oversized WebSocket control frames - Fix CVE-2026-15709: bound decompressed WebSocket message size - Add patches for CVE-2026-4271 and CVE-2026-5119 - Add patch for CVE-2026-1761 - Fix CVE-2026-0719 - Fix CVE-2025-14523 - Add patch for CVE-2025-12105 - Fix integer overflow in date/time parsing - Bump revision number - CVE-2026-102557 libsoup3: libsoup: Heap buffer overflow during WebSocket message reassembly - CVE-2026-102556 libsoup3: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion - CVE-2026-102558 libsoup3: libsoup: Heap buffer overflow during WebSocket receive-buffer growth - CVE-2026-102555 libsoup3: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding - CVE-2026-102560 libsoup3: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth - CVE-2026-102559 libsoup3: libsoup: Heap buffer overflow during WebSocket client-frame masking - Fix CVE-2026-85197: http2 crash after connection destroyed - Fix CVE-2026-15711: Reject oversized WebSocket control frames - Fix CVE-2026-15709: bound decompressed WebSocket message size - Add patches for CVE-2026-4271 and CVE-2026-5119 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuild for ghostscript-10.0.0 - Related: #2128814 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.2.12 - Resolves: #2159146 - Update to 0.2.11 - Resolves: #2139968 - Update libspelling 0.4.8 - Update to 0.4.6 - Initial import based on Fedora 42 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 20221101 version (#2139603) - update to 20240903 version and move pgk to AppStream - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - add %check (thanks to Gerd v. Egidy) Related: rhbz#2163492 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix the verbosity of some new logs added in 0.12.0 Resolves: RHEL-93748 - Rebase to 0.12.0 Resolves: RHEL-133421, RHEL-70825, RHEL-130042 - Add a Requires for crypto-policies instead of a Recommends Resolves: RHEL-139045 - Fix CVE-2025-5318 Resolves: RHEL-111721 - Add BuildRequires for p11-kit-client - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to new upstream version 0.11.1 - Resolves: RHEL-64319 - Remove the dependency on engine.h - Bump release for June 2024 mass rebuild - Add riscv64 - Build libssh with pkcs11-provider instead of pkcs11 engine - Resolves: RHEL-30437 - Backport CVE fixes from 0.12.2 Resolves: RHEL-213004 Resolves: RHEL-213029 Resolves: RHEL-213032 Resolves: RHEL-213039 Resolves: RHEL-213046 Resolves: RHEL-213079 Resolves: RHEL-213112 Resolves: RHEL-213117 Resolves: RHEL-213148 Resolves: RHEL-213150 Resolves: RHEL-213175 - Fix the verbosity of some new logs added in 0.12.0 Resolves: RHEL-93748 - Rebase to 0.12.0 Resolves: RHEL-133421, RHEL-70825, RHEL-130042 - Add a Requires for crypto-policies instead of a Recommends Resolves: RHEL-139045 - Fix CVE-2025-5318 Resolves: RHEL-111721 - Add BuildRequires for p11-kit-client - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to new upstream version 0.11.1 - Resolves: RHEL-64319 - Remove the dependency on engine.h - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove smis plugin sub package - Add gating.yaml - Upgrade to 1.10.1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove smis plugin sub package - Add gating.yaml - Upgrade to 1.10.1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove smis plugin sub package - Add gating.yaml - Upgrade to 1.10.1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove smis plugin sub package - Add gating.yaml - Upgrade to 1.10.1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove smis plugin sub package - Add gating.yaml - Upgrade to 1.10.1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove smis plugin sub package - Add gating.yaml - Upgrade to 1.10.1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove smis plugin sub package - Add gating.yaml - Upgrade to 1.10.1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove smis plugin sub package - Add gating.yaml - Upgrade to 1.10.1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 47.2 - build: fix a s390 test - update patches to sysprof-el10 branch - Backport ifdef check for register knowledge - Lower libpanel requirement for s390 - Backport debuginfod and sysprof-live-unwinder - Update to Sysprof 47.1 - Bump release for October 2024 mass rebuild: - Only bundle libunwind on RHEL like systems - Bundle libunwind as part of Sysprof - Update to 4.20.0 to fix CVE-2024-12133 - Bump release for October 2024 mass rebuild: - Initial CI and gating setup for RHEL-10 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate license field to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix for CVE-2025-13151 stack buffer overflow - Switch to autosetup - plans/ci: modify plan names - Properly check valgrind arches - Update to 4.20.0 to fix CVE-2024-12133 - Bump release for October 2024 mass rebuild: - Initial CI and gating setup for RHEL-10 - Bump release for June 2024 mass rebuild - Update to 4.20.0 to fix CVE-2024-12133 - Bump release for October 2024 mass rebuild: - Initial CI and gating setup for RHEL-10 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate license field to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix for CVE-2025-13151 stack buffer overflow - Switch to autosetup - plans/ci: modify plan names - Properly check valgrind arches - Update to 4.20.0 to fix CVE-2024-12133 - Bump release for October 2024 mass rebuild: - Initial CI and gating setup for RHEL-10 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Remove transfig dependency for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523) - drop unused compat libtiff.so.5 (RHEL-85372) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926) - Bump release for June 2024 mass rebuild - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189374) - make sure documentation is updated during build for CVE-2023-52355 (RHEL-178281) - reintroduce ignore option -i as it is required for tests (RHEL-185328) - backport documentation change for CVE-2023-52355 (RHEL-178281) - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523) - drop unused compat libtiff.so.5 (RHEL-85372) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926) - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523) - drop unused compat libtiff.so.5 (RHEL-85372) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926) - Bump release for June 2024 mass rebuild - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189374) - make sure documentation is updated during build for CVE-2023-52355 (RHEL-178281) - reintroduce ignore option -i as it is required for tests (RHEL-185328) - backport documentation change for CVE-2023-52355 (RHEL-178281) - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523) - drop unused compat libtiff.so.5 (RHEL-85372) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rework hardening patch to include loaders. (RHEL-33501) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump: for gcc 14.* in rawhide - Migrate to SPDX licenses (#2222091). - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - bump: for gcc 13.* in rawhide - C99 compatibility fix in the testsuite - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rework hardening patch to include loaders. (RHEL-33501) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump: for gcc 14.* in rawhide - Migrate to SPDX licenses (#2222091). - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - bump: for gcc 13.* in rawhide - C99 compatibility fix in the testsuite - Fix CVE-2025-49133 Resolves: RHEL-96247 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Backport "tpm2: Return TPM_RC_VALUE upon decryption failure" Resolves: RHEL-52968 - Disable TPM 1.2 support, as it is not supported by RHEL. - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Set license to 'BSD and TCGL' from previous 'BSD' (BZ2219548) - Fix trace messages (RHEL-80321) - Rebase to 1.5.2 and backport further SAST patches (RHEL-40112) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Drop useless mlocate dependency (RHEL-39378) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Use EXTRA_CFLAGS to fix annocheck (RHEL-33502) - Update to 1.8.4 (RHEL-61627) - Fix double free in event_read_print_args (RHEL-61627) - Fix SAST vulnerabilities (RHEL-40624) - Bump release for June 2024 mass rebuild - Use the distribution building flags (RHEL-33502) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.8.2 (#2213358) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to version 1.8.2 (RHEL-94793) - Fix read file failure code checking Resolves: RHEL-93863 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix SAST vulnerabilities (RHEL-40413) - Build with LTO (RHEL-46715) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.8.0 (RHBZ#2213357) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Disable stemmer support as libstemmer is being removed from RHEL 10 - Update to 3.7.3 and sync with Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.7.alpha - Backport upstream patch to fix C compatibility issue in Meson probe - Update to 3.6.0 - Update to 3.6.rc - Update to 3.6.beta - Bump release (RHEL-66937) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to version 0.23.0 (RHEL-56996) - Bump release for June 2024 mass rebuild - Update to version 0.20.9 https://github.com/tree-sitter/tree-sitter/releases/tag/v0.20.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to version 0.20.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - Change to almalinux bugtracker - Set --with-arch_64=x86-64-v2 on v2 arch - Fix sysroot packages for i686 architecture - fixes for testing non-production cross compilers (RHEL-114521) - include libsanitizer.spec and static sanitizer libraries in packages - enable tests involving target environment variables in cross testing - disable color for more sanitizer tests - fixes for testing non-production cross compilers (RHEL-114521) - enable guality tests in cross testing - enable simulate-thread tests in cross testing - enable gcov tests in cross testing - enable some miscellaneous tests in cross testing - fix some tree-prof tests for cross testing - fixes for testing non-production cross compilers (RHEL-114521) - enable stack-protector tests in cross testing - fixes for testing non-production cross compilers (RHEL-114521) - include libstdc++fs.a and libstdc++exp.a in sysroot packages - add libsanitizer sysroot packages - save testsuite .sum files in build logs - add packages with files from build tree used in testsuite - escape \r in dg-regexp test names to avoid truncation in build-tree testing - fix iconv linking for installed testing - enable compat testing for installed testing - distinguish canonical and noncanonical target for installed testing - add plugin headers packages for cross compilers - install text-art/*.h plugin headers - support plugin tests for installed testing - update from releases/gcc-14 branch - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620, c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092, fortran/120784, fortran/121145, fortran/121263, go/104290, libstdc++/110853, libstdc++/117276, libstdc++/120698, libstdc++/121097, libstdc++/121374, libstdc++/121496, libstdc++/121745, libstdc++/121827, libstdc++/122168, libstdc++/122322, middle-end/121453, middle-end/121828, other/118919, rtl-optimization/121253, target/49857, target/81540, target/118280, target/120442, target/120476, target/120691, target/121118, target/121208, target/121294, target/121414, target/121449, target/121542, target/121599, target/121608, target/121749, target/122177, target/122187, target/122210, target/122220, target/122222, testsuite/118567, tree-optimization/117423, tree-optimization/119085, tree-optimization/120357, tree-optimization/120358, tree-optimization/120654, tree-optimization/120817, tree-optimization/120944, tree-optimization/121059, tree-optimization/121256, tree-optimization/121370, tree-optimization/121772, tree-optimization/121870, tree-optimization/122104 - add sysroot packages for use by non-production cross compilers (RHEL-118680) - add cross compilers for aarch64, ppc64le and s390x for non-production uses (RHEL-114519) - Add branch, conditions, and calls to gcov function summaries (RHEL-105464) - Update to latest pretty printers from GTS (RHEL-81976) - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - Bump release for June 2024 mass rebuild - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437) - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - reworking the tmt/fmf enablement to the form that Display systems QE use - Update to 1.0.29 and migrate to tmt test - Update to the upstream version 1.0.28 - Update to the upstream version 1.0.28 - Fix automake-1.17 issue since the release was based on automake-1.17 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - gating: Change the gating settings for RHEL-10 - RHEL-35520 Update to release 1.0.27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to release 1.0.30 - reworking the tmt/fmf enablement to the form that Display systems QE use - Update to 1.0.29 and migrate to tmt test - Update to the upstream version 1.0.28 - Update to the upstream version 1.0.28 - Fix automake-1.17 issue since the release was based on automake-1.17 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - use sysuser setting for uuidd - Fix heap buffer overread in setpwnam() [CVE-2025-14104] - libfdisk: fix off-by-one in maximum last sector calculation - mount: improve --all documentation - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical - libblkid: use snprintf() instead of sprintf() - lscpu: Add NVIDIA Olympus arm64 core - libfdisk: improve collision reporting - libfdisk: (dos) ignore incomplete EBR for non-wholedisk - wall: always use utmp as fallback - lscpu: update table with ARM IDs - coresched: backport new tool to RHEL-10 - agetty: fix stdin conversion to tty name - blkid: allow up to 64k erofs block sizes - more(1): make sure we have data on stderr - Update to version 1.51.0 - add test plan for gating - Update to 1.49.2 - Bump release for October 2024 mass rebuild: - Update gating.yaml - add RHEL gating configuration - Bump release for June 2024 mass rebuild - Update to libuv 1.48.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Temporarily disable tests on CentOS Stream / RHEL - Update to version 1.52.1 - Update to version 1.51.0 - Update to version 1.50.0 - add test plan for gating - Update to 1.49.2 - Bump release for October 2024 mass rebuild: - Update gating.yaml - add RHEL gating configuration - Bump release for June 2024 mass rebuild - Update to version 1.51.0 - add test plan for gating - Update to 1.49.2 - Bump release for October 2024 mass rebuild: - Update gating.yaml - add RHEL gating configuration - Bump release for June 2024 mass rebuild - Update to libuv 1.48.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Temporarily disable tests on CentOS Stream / RHEL - Update to version 1.52.1 - Update to version 1.51.0 - Update to version 1.50.0 - add test plan for gating - Update to 1.49.2 - Bump release for October 2024 mass rebuild: - Update gating.yaml - add RHEL gating configuration - Bump release for June 2024 mass rebuild - Update to version 1.51.0 - add test plan for gating - Update to 1.49.2 - Bump release for October 2024 mass rebuild: - Update gating.yaml - add RHEL gating configuration - Bump release for June 2024 mass rebuild - Update to libuv 1.48.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Temporarily disable tests on CentOS Stream / RHEL - Update to version 1.52.1 - Update to version 1.51.0 - Update to version 1.50.0 - add test plan for gating - Update to 1.49.2 - Bump release for October 2024 mass rebuild: - Update gating.yaml - add RHEL gating configuration - Bump release for June 2024 mass rebuild - Rebuilt for CRB inclusion Resolves: RHEL-135109 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.26.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix typo in license - update to 2.22.0 Resolves: RHEL-45837 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Restore support for nvctrl - Update to 2.20.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.19.0 - Update to 2.18.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix typo in license - update to 2.22.0 Resolves: RHEL-45837 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Restore support for nvctrl - Update to 2.20.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.19.0 - Update to 2.18.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration: license is already SPDX compatible - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration: license is already SPDX compatible - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Synchronize spec file with upstream - Update to 1.4.1 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebased to 5.0.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix pointer cast warning - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Pull in mingw sub-packages - Remove obsolete ldconfig scripts - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547) - qemu: Remove 'allowReboot' field (RHEL-242547) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547) - Add support for keeping VM running when panic notifier is used (RHEL-242547) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982) - Add guest device info to virDomainGetGuestInfo (RHEL-243305) - qemu_agent: Introduce guest-get-devices (RHEL-243305) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019) - conf: Add fields for recording actually-selected virtio video device (RHEL-186019) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019) - vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267) - vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) - conf: Parse hyperv features even for host-model (RHEL-153576) - qemu: Wire up new hyperv host-model mode behavior (RHEL-153576) - Enable building for ppc64le - test: Default to ROM type for loader (RHEL-82645) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916) - qemu_firmware: Drop support for kernel descriptors (RHEL-82645) - qemu_firmware: Drop 'nvram' local variable (RHEL-82645) - qemu_firmware: Move format=raw compat exception (RHEL-82645) - qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645) - tests: Add firmware-manual-efi-rw-nvram (RHEL-82645) - domain_validate: Reject NVRAM with read/write firmware (RHEL-82645) - tests: Add firmware-auto-bios-rw (RHEL-82645) - tests: Add firmware-manual-bios-rw (RHEL-82645) - domain_validate: Reject read/write ROMs (RHEL-82645) - tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645) - domain_validate: Reject ROMs with format other than raw (RHEL-82645) - qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645) - qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645) - schemas: Allow templateFormat without template path (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645) - tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645) - tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645) - tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645) - qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645) - qemu_firmware: Set templateFormat for custom paths (RHEL-82645) - qemu_firmware: Simplify handling of legacy paths (RHEL-82645) - qemu_firmware: Refactor setting NVRAM format (RHEL-82645) - qemu_firmware: Prefer template format to loader format (RHEL-82645) - qemu_firmware: Retain user-specified NVRAM format (RHEL-82645) - qemu_firmware: Take templateFormat into account when matching (RHEL-82645) - qemu_firmware: Take NVRAM format into account when matching (RHEL-82645) - qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645) - tests: Add firmware-manual-efi-sev-snp (RHEL-82645) - tests: Add firmware-manual-efi-tdx (RHEL-82645) - qemu_firmware: ROM firmware is always in raw format (RHEL-82645) - qemu_firmware: Don't skip autoselection for ROM (RHEL-82645) - qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645) - schema: Add firmwareFeatures element for domaincaps (RHEL-82645) - conf: Add firmwareFeatures element for domaincaps (RHEL-82645) - qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645) - docs: Document firmwareFeature element for domaincaps (RHEL-82645) - docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645) - docs: Improvement related to firmware selection (RHEL-82645) - qemu_firmware: Only set format for custom loader if path is present (RHEL-82645) - conf: Move type=rom default for loader to drivers (RHEL-82645) - tests: Rename custom JSON firmware descriptors (RHEL-82645) - schema: Introduce osnvram define (RHEL-82645) - conf: Parse and format varstore element (RHEL-82645) - conf: Update validation to consider varstore element (RHEL-82645) - qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645) - qemu: Validate presence of uefi-vars device (RHEL-82645) - tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645) - tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645) - tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645) - qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645) - qemu_firmware: Split sanity check (RHEL-82645) - qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645) - qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645) - qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645) - conf: Include varstore element in domcaps (RHEL-82645) - qemu: Fill in varstore element in domcaps (RHEL-82645) - qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645) - qemu_firmware: Allow matching stateful ROMs (RHEL-82645) - qemu_firmware: Fill in varstore information (RHEL-82645) - qemu: Introduce varstoreDir (RHEL-82645) - qemu_firmware: Generate varstore path when necessary (RHEL-82645) - qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645) - qemu: Create and delete varstore file (RHEL-82645) - security: Mark ROMs as read only when using AppArmor (RHEL-82645) - security: Handle varstore file (RHEL-82645) - tests: Add firmware descriptors for uefi-vars builds (RHEL-82645) - qemu_command: Use uefi-vars device where appropriate (RHEL-82645) - include: Mention varstore where applicable (RHEL-82645) - virsh: Update for varstore handling (RHEL-82645) - domain_conf: initialize network hostdev private data (RHEL-151916) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351) - util: Move openning IOMMU device to viriommufd (RHEL-150351) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351) - util: Move openning VFIO device to virpci (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351) - qemuxmlconftest: Refactor host device preparation (RHEL-150351) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351) - qemu: Save IOMMUFD state into status XML (RHEL-150351) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351) - qemu_command: Extract building IOMMUFD props to function (RHEL-150351) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351) - conf: Introduce iommufd enum for domaincaps (RHEL-148135) - qemu: Fill iommufd domain capability (RHEL-148135) - tests: properly mock VFIO and IOMMU checks (RHEL-148135) - iommufd: fix FD leak in case of error (RHEL-150351) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115) - qemu: Implement support for persistent reservation migration control (RHEL-135115) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335) - Introduce support for disk operation latency histogram collection (RHEL-131335) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335) - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080) - qemu: Ignore cmp_legacy CPU flag (RHEL-148494) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933) - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202) - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202) - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202) - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202) - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089) - esx: Debug URL just before opening with curl (RHEL-138300) - esx: Abstract all URL-creation code into one function (RHEL-138300) - esx: Switch to creating URLs using virURIFormat (RHEL-138300) - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196) - esx: URI encode inventory objects twice (RHEL-140196) - Update to upstream release 9.8.80 - Resolves: RHEL-98258 - Update to upstream release 9.8.71. - Resolves: RHEL-94484 - Fix a small memory leak and adjusted the code style. Resolves: RHEL-24810 - Add support for kernel 6.10. Resolves: RHEL-24810 - Update to upstream release 9.8.60. Resolves: RHEL-24810 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to upstream release 9.8.51 - Resolves: RHEL-24810 - Update to upstream release 9.8.80 - Resolves: RHEL-98258 - Update to upstream release 9.8.71. - Resolves: RHEL-94484 - Fix a small memory leak and adjusted the code style. Resolves: RHEL-24810 - Add support for kernel 6.10. Resolves: RHEL-24810 - Update to upstream release 9.8.60. Resolves: RHEL-24810 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to upstream release 9.8.51 - Resolves: RHEL-24810 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - adding gating.yaml configuration - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - New upstream release - Update C++ standard from C++11 to C++14 - Compilation fixes for recent versions of GCC - Small fixes to Finnish grammar checker - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Migrate license tag to SPDX - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add patch for superindex full Resolves: RHEL-150332 - Bump version for rebuild Resolves: RHEL-93904 - Bump version for rebuild Resolves: RHEL-93904 - Add patch for double free Resolves: RHEL-93904 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to 1.14.1 Resolves: RHEL-40644 - Replace yasm with nasm Resolves: RHEL-45221 - Bump release for June 2024 mass rebuild - Rearrange the dial leaders for the Intuos Pro 3rd Gen (RHEL-122812) - Rearrange the button leaders for the Intuos Pro 3rd Gen (RHEL-101873) - Add Wacom Intuos Pro 3rd Gen and newest Cintiqs (RHEL-101873) - libwacom 2.14 (RHEL-70830) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - libwacom 2.12.2 - libwacom 2.12.1 - libwacom 2.12 - libwacom 2.10.0 - Rearrange the dial leaders for the Intuos Pro 3rd Gen (RHEL-122812) - Rearrange the button leaders for the Intuos Pro 3rd Gen (RHEL-101873) - Add Wacom Intuos Pro 3rd Gen and newest Cintiqs (RHEL-101873) - libwacom 2.14 (RHEL-70830) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - libwacom 2.12.2 - libwacom 2.12.1 - libwacom 2.12 - libwacom 2.10.0 - Rebase to 1.24.0 Resolves: RHEL-107614 - Update to 1.23.1 Resolves: RHEL-86834 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.23.0 (RHEL-45197) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to 1.24.0 Resolves: RHEL-107614 - Update to 1.23.1 Resolves: RHEL-86834 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.23.0 (RHEL-45197) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to 1.24.0 Resolves: RHEL-107614 - Update to 1.23.1 Resolves: RHEL-86834 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.23.0 (RHEL-45197) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to 1.24.0 Resolves: RHEL-107614 - Update to 1.23.1 Resolves: RHEL-86834 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.23.0 (RHEL-45197) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Updated License (RHEL-105872) - Backport the move to SPDX license format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixed rpm dependency - Disable libwebp-java on RHEL - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Updated License (RHEL-105872) - Backport the move to SPDX license format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixed rpm dependency - Disable libwebp-java on RHEL - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247346 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Abort after PROTOCOL_FAILED_NEGO (CVE-2026-91949) Resolves: RHEL-264913 - Fix several regressions in CVE-2026-73241 Resolves: RHEL-257781 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247346 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Backport several CVE fixes (CVE-2026-85089, CVE-2026-91946, CVE-2026-91947, CVE-2026-91950, CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91960, CVE-2026-91963, CVE-2026-91964) Resolves: RHEL-253892, RHEL-260716, RHEL-260750, RHEL-260763, RHEL-260778 Resolves: RHEL-260794, RHEL-260807, RHEL-260842, RHEL-260856, RHEL-260891 Resolves: RHEL-260912 - Abort after PROTOCOL_FAILED_NEGO (CVE-2026-91949) Resolves: RHEL-264913 - Fix several regressions in CVE-2026-73241 Resolves: RHEL-257781 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247346 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652, CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297, CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241) Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534 Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250 Resolves: RHEL-224185 - Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242) Resolves: RHEL-224050, RHEL-238931 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Backport several CVE fixes Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971 Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900 Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980 - Backport several CVE fixes Resolves: RHEL-151976, RHEL-152203 - Backport several CVE fixes Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894 - Backport several CVE fixes Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350 Resolves: RHEL-142334, RHEL-142318 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Backport several CVE fixes Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971 Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900 Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980 - Backport several CVE fixes Resolves: RHEL-151976, RHEL-152203 - Backport several CVE fixes Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894 - Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604 - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327 - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700) Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159848 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) - Use winpr_aligned_calloc in persistent cache (CVE-2026-33982) Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469 Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162947, RHEL-162963 - Rebuilt for errata Resolves: RHEL-155980 - Fix use of nsc_process_message - Increase timeout for TestSynchCritical Resolves: RHEL-155980 - Backport several CVE fixes Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971 Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900 Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980 - Backport several CVE fixes Resolves: RHEL-151976, RHEL-152203 - Backport several CVE fixes Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350 Resolves: RHEL-142334, RHEL-142318 - Try next DNS entry on connect failure Resolves: RHEL-140099 - Fix broken SSL checks and disable runtime checks (RHEL-73724) - Silence abidiff - Resolves: RHEL-86251 - Limit threadpool to 16 threads - Resolves: RHEL-86251 - Initialize function pointers after resource allocation - Fixes CVE-2025-4478 - Resolves: RHEL-91583 - Update to 3.10.3 - Update to 3.9.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.8.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fix rhbz (#2242944) - disable Revert-pager-do-not-change-workspace-size-from-size patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Modify RPM verification of ssleay.cnf Related: RHEL-113443 - Fix bogus 'sscg' arguments Related: RHEL-113443 - Update to openwsman-2.8.1 Resolves: RHEL-99191 - Update OpenSSL certificates set up Resolves: RHEL-113443 - Support added for post-quantum cryptography Resolves: RHEL-93091 - Remove deprecated path from systemd service file Resolves: RHEL-101169 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update license tags in subpackages to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - libxcb 1.17.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add missing README.md and libxcb-dbe - libxcb 1.16 - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - libxcb 1.17.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add missing README.md and libxcb-dbe - libxcb 1.16 - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 + libxcrypt-4.4.36-9 - Added back -compat package for RHEL 10 (final) - CI and gating for RHEL 10 - Bumped version not to clash with previous bad build. - Added back -compat package for RHEL 10 (bootstrap) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Remove -compat package from Fedora ELN / RHEL 10 - Fix C compatibility issue in the configure script - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - New upstream release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 + libxcrypt-4.4.36-9 - Added back -compat package for RHEL 10 (final) - CI and gating for RHEL 10 - Bumped version not to clash with previous bad build. - Added back -compat package for RHEL 10 (bootstrap) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Remove -compat package from Fedora ELN / RHEL 10 - Fix C compatibility issue in the configure script - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - New upstream release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix explicit package version requirement (RHEL-45635). - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Upstream version bump - Upstream version bump - Drop upstreamed patch - Upstream version bump - Add annocheck exceptions for BPF objects (Felix) - Re-enable debug builds (Felix) - Add libcap-ng-devel to BuildDepends - Upstream version bump - Fix build with Clang 20 - Upstream version bump - Upstream version bump - Upstream version bump - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Explicitly Require libxkbcommon in x11-utils for rpminspect - libxkbcommon 1.7.0 - Split the x11-utils into their own subpackage with the right requires - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libxkbcommon 1.6.0 - SPDX migration: update to SPDX license identifiers - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libxbkcommon 1.5.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Explicitly Require libxkbcommon in x11-utils for rpminspect - libxkbcommon 1.7.0 - Split the x11-utils into their own subpackage with the right requires - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libxkbcommon 1.6.0 - SPDX migration: update to SPDX license identifiers - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libxbkcommon 1.5.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Explicitly Require libxkbcommon in x11-utils for rpminspect - libxkbcommon 1.7.0 - Split the x11-utils into their own subpackage with the right requires - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libxkbcommon 1.6.0 - SPDX migration: update to SPDX license identifiers - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libxbkcommon 1.5.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - libxkbfile 1.1.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libxkbfile 1.1.2 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - libxkbfile 1.1.1-1 - Fix xmllint error code (RHEL-126768) - Fix CVE-2025-32415 (RHEL-100174) - Fix CVE-2025-32414 (RHEL-99861) - Fix CVE-2025-7425 (RHEL-102794) - Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421) - Fix CVE-2025-6021 (RHEL-96495) - Fix CVE-2025-49794 (RHEL-96395) - Fix CVE-2025-49795 (RHEL-96408) - Fix CVE-2025-49796 (RHEL-96421) - Fix CVE-2024-56171 (RHEL-80119) - Fix CVE-2025-24928 (RHEL-80134) - Fix CVE-2024-40896 (RHEL-72060) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 2.12.5 (#2262648) - Fix CVE-2024-34459 (RHEL-177890) - Fix xmllint error code (RHEL-126768) - Fix CVE-2025-32415 (RHEL-100174) - Fix CVE-2025-32414 (RHEL-99861) - Fix CVE-2025-7425 (RHEL-102794) - Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421) - Fix CVE-2025-6021 (RHEL-96495) - Fix CVE-2025-49794 (RHEL-96395) - Fix CVE-2025-49795 (RHEL-96408) - Fix CVE-2025-49796 (RHEL-96421) - Fix CVE-2024-56171 (RHEL-80119) - Fix CVE-2025-24928 (RHEL-80134) - Fix CVE-2024-40896 (RHEL-72060) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix CVE-2025-6170 (RHEL-182007) - Fix CVE-2024-34459 (RHEL-177890) - Fix xmllint error code (RHEL-126768) - Fix CVE-2025-32415 (RHEL-100174) - Fix CVE-2025-32414 (RHEL-99861) - Fix CVE-2025-7425 (RHEL-102794) - Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421) - Fix CVE-2025-6021 (RHEL-96495) - Fix CVE-2025-49794 (RHEL-96395) - Fix CVE-2025-49795 (RHEL-96408) - Fix CVE-2025-49796 (RHEL-96421) - Fix CVE-2024-56171 (RHEL-80119) - Fix CVE-2025-24928 (RHEL-80134) - Fix CVE-2024-40896 (RHEL-72060) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix CVE-2026-11979 (RHEL-215571) - Fix CVE-2025-6170 (RHEL-182007) - Fix CVE-2024-34459 (RHEL-177890) - Fix xmllint error code (RHEL-126768) - Fix CVE-2025-32415 (RHEL-100174) - Fix CVE-2025-32414 (RHEL-99861) - Fix CVE-2025-7425 (RHEL-102794) - Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421) - Fix CVE-2025-6021 (RHEL-96495) - Fix CVE-2025-49794 (RHEL-96395) - Fix CVE-2025-49795 (RHEL-96408) - Fix CVE-2025-49796 (RHEL-96421) - Fix CVE-2024-56171 (RHEL-80119) - Fix CVE-2025-24928 (RHEL-80134) - Fix CVE-2024-40896 (RHEL-72060) - Fix CVE-2026-86144 (RHEL-256302) - Fix CVE-2026-86140 (RHEL-256024) - Fix CVE-2026-74860 (RHEL-255957) - Fix CVE-2026-86142 (RHEL-256368) - Fix CVE-2026-86143 (RHEL-256896) - Fix CVE-2026-86138 (RHEL-256948) - Fix CVE-2026-11979 (RHEL-215571) - Fix CVE-2025-6170 (RHEL-182007) - Fix CVE-2024-34459 (RHEL-177890) - Fix xmllint error code (RHEL-126768) - Fix CVE-2025-32415 (RHEL-100174) - Fix CVE-2025-32414 (RHEL-99861) - Fix CVE-2025-7425 (RHEL-102794) - Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421) - Fix CVE-2025-6021 (RHEL-96495) - Fix CVE-2025-49794 (RHEL-96395) - Fix CVE-2025-49795 (RHEL-96408) - Fix CVE-2025-49796 (RHEL-96421) - Fix CVE-2024-56171 (RHEL-80119) - Fix CVE-2025-24928 (RHEL-80134) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libxshmfence 1.3.2 - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - libxshmfence 1.3.2 - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix CVE-2025-7424 (RHEL-102746) - Fix CVE-2024-55549 (RHEL-83503) - Fix CVE-2025-24855 (RHEL-83489) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Only build python support on Fedora - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.1.39 - Fix CVE-2025-10911 (RHEL-171996) - Fix CVE-2025-7424 (RHEL-102746) - Fix CVE-2024-55549 (RHEL-83503) - Fix CVE-2025-24855 (RHEL-83489) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Only build python support on Fedora - Bump release for June 2024 mass rebuild - Fix CVE-2025-7424 (RHEL-102746) - Fix CVE-2024-55549 (RHEL-83503) - Fix CVE-2025-24855 (RHEL-83489) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Only build python support on Fedora - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.1.39 - Fix CVE-2025-10911 (RHEL-171996) - Fix CVE-2025-7424 (RHEL-102746) - Fix CVE-2024-55549 (RHEL-83503) - Fix CVE-2025-24855 (RHEL-83489) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Only build python support on Fedora - Bump release for June 2024 mass rebuild - Resolves: RHEL-119430 - Move libyang-devel to CRB - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - New version 2.1.148 - Bump release for June 2024 mass rebuild - Properly check valgrind arches - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - DoS or arbitrary code execution via maliciously crafted LYB binary blob - Resolves: RHEL-177026 - CVE-2026-44673 - Resolves: RHEL-119430 - Move libyang-devel to CRB - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - New version 2.1.148 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Switch to use Kyoto Cabinet - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 2.8.1 - bug fixes - Update to 2.8.0 - bug fixes for ARMv7 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 1.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - update to 1.10.0 - use python3-nihtest instead of perl for tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 1.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - update to 1.10.0 - use python3-nihtest instead of perl for tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Backport the patch that enables BTI on aarch64 Related: RHEL-50092 - Add the gating test from rhel-9 Related: RHEL-50092 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Drop gtest on RHEL (c9s backport) - migrate to SPDX license format - Latest upstream - Latest upstream - create reverse compatibility symlink to /var/run/ptp4l (RHEL-145071) - add missing build requirement on lipcap-devel - add support for dropping root privileges (disabled by default) (RHEL-12183) - create linuxptp user and /run/ptp directory - handle missing pulses in ts2phc (RHEL-112344) - fix unicast server to recover after port fault (RHEL-93497) - add experimental option for external PPS in ts2phc automatic mode (RHEL-89605) - add command to set external grandmaster properties (RHEL-91310) - refresh link status on faults (RHEL-89811) - update selinux policy (RHEL-76786) - harden systemd services (RHEL-76760) - update to 4.4 (RHEL-58210) - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055) - support static sink clocks in phc2sys automatic mode (RHEL-69145) - don't require -O option without -a and -w in phc2sys (RHEL-69699) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - update to 4.3 (RHEL-54718) - add holdover support to ts2phc (RHEL-54716) - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719) - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724) - fix ts2phc to correctly handle leap seconds (RHEL-54721) - fix phc2sys service to allow clocks specified by interface (RHEL-191400) - fix high CPU usage by ptp4l when link is down (RHEL-191401) - fix phc2sys to not get stuck in static mode (RHEL-185752) - create reverse compatibility symlink to /var/run/ptp4l (RHEL-145071) - add missing build requirement on lipcap-devel - add support for dropping root privileges (disabled by default) (RHEL-12183) - create linuxptp user and /run/ptp directory - handle missing pulses in ts2phc (RHEL-112344) - fix unicast server to recover after port fault (RHEL-93497) - add experimental option for external PPS in ts2phc automatic mode (RHEL-89605) - add command to set external grandmaster properties (RHEL-91310) - refresh link status on faults (RHEL-89811) - update selinux policy (RHEL-76786) - harden systemd services (RHEL-76760) - update to 4.4 (RHEL-58210) - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055) - support static sink clocks in phc2sys automatic mode (RHEL-69145) - don't require -O option without -a and -w in phc2sys (RHEL-69699) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - create reverse compatibility symlink to /var/run/ptp4l (RHEL-145071) - add missing build requirement on lipcap-devel - add support for dropping root privileges (disabled by default) (RHEL-12183) - create linuxptp user and /run/ptp directory - handle missing pulses in ts2phc (RHEL-112344) - fix unicast server to recover after port fault (RHEL-93497) - add experimental option for external PPS in ts2phc automatic mode (RHEL-89605) - add command to set external grandmaster properties (RHEL-91310) - refresh link status on faults (RHEL-89811) - update selinux policy (RHEL-76786) - harden systemd services (RHEL-76760) - update to 4.4 (RHEL-58210) - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055) - support static sink clocks in phc2sys automatic mode (RHEL-69145) - don't require -O option without -a and -w in phc2sys (RHEL-69699) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - update to 4.3 (RHEL-54718) - add holdover support to ts2phc (RHEL-54716) - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719) - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724) - fix ts2phc to correctly handle leap seconds (RHEL-54721) - fix phc2sys service to allow clocks specified by interface (RHEL-191400) - fix high CPU usage by ptp4l when link is down (RHEL-191401) - fix phc2sys to not get stuck in static mode (RHEL-185752) - create reverse compatibility symlink to /var/run/ptp4l (RHEL-145071) - add missing build requirement on lipcap-devel - add support for dropping root privileges (disabled by default) (RHEL-12183) - create linuxptp user and /run/ptp directory - handle missing pulses in ts2phc (RHEL-112344) - fix unicast server to recover after port fault (RHEL-93497) - add experimental option for external PPS in ts2phc automatic mode (RHEL-89605) - add command to set external grandmaster properties (RHEL-91310) - refresh link status on faults (RHEL-89811) - update selinux policy (RHEL-76786) - harden systemd services (RHEL-76760) - update to 4.4 (RHEL-58210) - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055) - support static sink clocks in phc2sys automatic mode (RHEL-69145) - don't require -O option without -a and -w in phc2sys (RHEL-69699) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Updated to 1.0.21 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Updated to 1.0.21 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - Rebased to 1.0.19 (RHEL-73629) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove networkd tests from gating test - Bump release for June 2024 mass rebuild - Strip ASL/APSL components (RHELMISC-4345) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Reapply C99 compatibility fix - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Correcting usage of rundir macro - Fix creation of sysuser - Rebased to 1.0.19 (RHEL-73629) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove networkd tests from gating test - Bump release for June 2024 mass rebuild - Strip ASL/APSL components (RHELMISC-4345) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Reapply C99 compatibility fix - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Correcting usage of rundir macro - Fix creation of sysuser - Include nodejs build dependency explicitely - Bump release for October 2024 mass rebuild: - Backport fix for CVE-2024-27982 - Update to 9.2.1 - Run llhttp test for gating - Bump release for June 2024 mass rebuild - Enable RHEL gating for llhttp - Avoid licensecheck dependency in RHEL builds - Better audit (and document auditing of) dev dependency licenses - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - SPDX migration (Miroslav Suchý) Resolves: RHEL-29907 - Adapt to constification of argv parameters in rrdtool - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - SPDX migration (Miroslav Suchý) Resolves: RHEL-29907 - Adapt to constification of argv parameters in rrdtool - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - SPDX migration (Miroslav Suchý) Resolves: RHEL-29907 - Adapt to constification of argv parameters in rrdtool - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - SPDX migration (Miroslav Suchý) Resolves: RHEL-29907 - Adapt to constification of argv parameters in rrdtool - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Drop requires on java-devel - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild - Do not install zip files - Update to upstream version 2.20.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Drop requires on java-devel - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild - Do not install zip files - Update to upstream version 2.20.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Drop requires on java-devel - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild - Do not install zip files - Update to upstream version 2.20.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Install and use systemd-tmpfiles.d mechanism - Resolves: RHEL-138672 - rebuilt - Resolves: RHEL-102044 - Add support for zstd-compressed log files - Resolves: RHEL-102044 - sshd: sort IP adresses by report count - Resolves: RHEL-58995 - Update to 7.11 - Resolves: RHEL-58713 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 7.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add x86_64_v2 support - Add riscv64 support - executils: Ignore utf-8 decode errors (bcl) Resolves: RHEL-121650 - executils: Remove binary_output flag (bcl) Related: RHEL-121650 - logging: Set encoding=UTF-8 on FileHandler (bcl) Related: RHEL-121650 - executils: Set encoding to UTF-8 for _run_program (bcl) Related: RHEL-121650 - New lorax documentation - 40.5.14 (bcl) Related: RHEL-130954 - templates: Synchronize generic templates with lorax-templates-rhel (bcl) Related: RHEL-126547 Resolves: RHEL-130954 - livemedia.ks: Increase size of root partition in example live kickstart (bcl) Resolves: RHEL-142732 - executils: decoding after deserialization (oleg.sviridov) Resolves: RHEL-121650 - templates: Synchronize generic templates with lorax-templates-rhel (bcl) Resolves: RHEL-80789 - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl) Resolves: RHEL-83202 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) Resolves: RHEL-83519 - erofs: Make smaller lzma erofs images by default (bcl) Related: RHEL-48606 - Revert "erofs: Change the erofs compression default to zstd" (bcl) Related: RHEL-48606 - erofs: Change the erofs compression default to zstd (bcl) Related: RHEL-48606 - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl) Related: RHEL-66603 - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl) Related: RHEL-66603 - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl) Related: RHEL-66603 - tests: Swap nomodeset for inst.text in mkksiso test data (bcl) Related: RHEL-66603 - templates: Change nomodeset / basic graphics to use inst.text (bcl) Resolves: RHEL-66603 - templates: Drop nomodeset / basic graphics menu from live configs (bcl) Related: RHEL-66603 - tests: Fix mkksiso unit test (bcl) Related: RHEL-61778 - pylint: Print astroid version (bcl) Related: RHEL-61778 - Extend help for --updates and --ks parameters (jkonecny) Related: RHEL-61778 - Fix --updates the updates image wasn't loaded (jkonecny) Resolves: RHEL-61778 - Implement --replace also for S390 (sebastian.stark) Related: RHEL-61778 - mkksiso: option --replace to replace arbitrary text in boot config. (sebastian.stark) Related: RHEL-61778 - livemedia: Add isomd5sum (bcl) Resolves: RHEL-58896 - templates: Sync template changes from lorax-templates-rhel (bcl) Resolves: RHEL-54713 - tests: Add a test to make sure redhat-release-eula isn't included (bcl) Related: RHEL-54381 - Add x86_64_v2 support - Add riscv64 support - executils: Ignore utf-8 decode errors (bcl) Resolves: RHEL-121650 - executils: Remove binary_output flag (bcl) Related: RHEL-121650 - logging: Set encoding=UTF-8 on FileHandler (bcl) Related: RHEL-121650 - executils: Set encoding to UTF-8 for _run_program (bcl) Related: RHEL-121650 - New lorax documentation - 40.5.14 (bcl) Related: RHEL-130954 - templates: Synchronize generic templates with lorax-templates-rhel (bcl) Related: RHEL-126547 Resolves: RHEL-130954 - livemedia.ks: Increase size of root partition in example live kickstart (bcl) Resolves: RHEL-142732 - executils: decoding after deserialization (oleg.sviridov) Resolves: RHEL-121650 - templates: Synchronize generic templates with lorax-templates-rhel (bcl) Resolves: RHEL-80789 - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl) Resolves: RHEL-83202 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) Resolves: RHEL-83519 - erofs: Make smaller lzma erofs images by default (bcl) Related: RHEL-48606 - Revert "erofs: Change the erofs compression default to zstd" (bcl) Related: RHEL-48606 - erofs: Change the erofs compression default to zstd (bcl) Related: RHEL-48606 - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl) Related: RHEL-66603 - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl) Related: RHEL-66603 - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl) Related: RHEL-66603 - tests: Swap nomodeset for inst.text in mkksiso test data (bcl) Related: RHEL-66603 - templates: Change nomodeset / basic graphics to use inst.text (bcl) Resolves: RHEL-66603 - templates: Drop nomodeset / basic graphics menu from live configs (bcl) Related: RHEL-66603 - tests: Fix mkksiso unit test (bcl) Related: RHEL-61778 - pylint: Print astroid version (bcl) Related: RHEL-61778 - Extend help for --updates and --ks parameters (jkonecny) Related: RHEL-61778 - Fix --updates the updates image wasn't loaded (jkonecny) Resolves: RHEL-61778 - Implement --replace also for S390 (sebastian.stark) Related: RHEL-61778 - mkksiso: option --replace to replace arbitrary text in boot config. (sebastian.stark) Related: RHEL-61778 - livemedia: Add isomd5sum (bcl) Resolves: RHEL-58896 - templates: Sync template changes from lorax-templates-rhel (bcl) Resolves: RHEL-54713 - tests: Add a test to make sure redhat-release-eula isn't included (bcl) Related: RHEL-54381 - Add x86_64_v2 support - Add riscv64 support - executils: Ignore utf-8 decode errors (bcl) Resolves: RHEL-121650 - executils: Remove binary_output flag (bcl) Related: RHEL-121650 - logging: Set encoding=UTF-8 on FileHandler (bcl) Related: RHEL-121650 - executils: Set encoding to UTF-8 for _run_program (bcl) Related: RHEL-121650 - New lorax documentation - 40.5.14 (bcl) Related: RHEL-130954 - templates: Synchronize generic templates with lorax-templates-rhel (bcl) Related: RHEL-126547 Resolves: RHEL-130954 - livemedia.ks: Increase size of root partition in example live kickstart (bcl) Resolves: RHEL-142732 - executils: decoding after deserialization (oleg.sviridov) Resolves: RHEL-121650 - templates: Synchronize generic templates with lorax-templates-rhel (bcl) Resolves: RHEL-80789 - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl) Resolves: RHEL-83202 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) Resolves: RHEL-83519 - erofs: Make smaller lzma erofs images by default (bcl) Related: RHEL-48606 - Revert "erofs: Change the erofs compression default to zstd" (bcl) Related: RHEL-48606 - erofs: Change the erofs compression default to zstd (bcl) Related: RHEL-48606 - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl) Related: RHEL-66603 - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl) Related: RHEL-66603 - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl) Related: RHEL-66603 - tests: Swap nomodeset for inst.text in mkksiso test data (bcl) Related: RHEL-66603 - templates: Change nomodeset / basic graphics to use inst.text (bcl) Resolves: RHEL-66603 - templates: Drop nomodeset / basic graphics menu from live configs (bcl) Related: RHEL-66603 - tests: Fix mkksiso unit test (bcl) Related: RHEL-61778 - pylint: Print astroid version (bcl) Related: RHEL-61778 - Extend help for --updates and --ks parameters (jkonecny) Related: RHEL-61778 - Fix --updates the updates image wasn't loaded (jkonecny) Resolves: RHEL-61778 - Implement --replace also for S390 (sebastian.stark) Related: RHEL-61778 - mkksiso: option --replace to replace arbitrary text in boot config. (sebastian.stark) Related: RHEL-61778 - livemedia: Add isomd5sum (bcl) Resolves: RHEL-58896 - templates: Sync template changes from lorax-templates-rhel (bcl) Resolves: RHEL-54713 - tests: Add a test to make sure redhat-release-eula isn't included (bcl) Related: RHEL-54381 - Add x86_64_v2 support - Add riscv64 support - executils: Ignore utf-8 decode errors (bcl) Resolves: RHEL-121650 - executils: Remove binary_output flag (bcl) Related: RHEL-121650 - logging: Set encoding=UTF-8 on FileHandler (bcl) Related: RHEL-121650 - executils: Set encoding to UTF-8 for _run_program (bcl) Related: RHEL-121650 - New lorax documentation - 40.5.14 (bcl) Related: RHEL-130954 - templates: Synchronize generic templates with lorax-templates-rhel (bcl) Related: RHEL-126547 Resolves: RHEL-130954 - livemedia.ks: Increase size of root partition in example live kickstart (bcl) Resolves: RHEL-142732 - executils: decoding after deserialization (oleg.sviridov) Resolves: RHEL-121650 - templates: Synchronize generic templates with lorax-templates-rhel (bcl) Resolves: RHEL-80789 - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl) Resolves: RHEL-83202 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) Resolves: RHEL-83519 - erofs: Make smaller lzma erofs images by default (bcl) Related: RHEL-48606 - Revert "erofs: Change the erofs compression default to zstd" (bcl) Related: RHEL-48606 - erofs: Change the erofs compression default to zstd (bcl) Related: RHEL-48606 - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl) Related: RHEL-66603 - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl) Related: RHEL-66603 - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl) Related: RHEL-66603 - tests: Swap nomodeset for inst.text in mkksiso test data (bcl) Related: RHEL-66603 - templates: Change nomodeset / basic graphics to use inst.text (bcl) Resolves: RHEL-66603 - templates: Drop nomodeset / basic graphics menu from live configs (bcl) Related: RHEL-66603 - tests: Fix mkksiso unit test (bcl) Related: RHEL-61778 - pylint: Print astroid version (bcl) Related: RHEL-61778 - Extend help for --updates and --ks parameters (jkonecny) Related: RHEL-61778 - Fix --updates the updates image wasn't loaded (jkonecny) Resolves: RHEL-61778 - Implement --replace also for S390 (sebastian.stark) Related: RHEL-61778 - mkksiso: option --replace to replace arbitrary text in boot config. (sebastian.stark) Related: RHEL-61778 - livemedia: Add isomd5sum (bcl) Resolves: RHEL-58896 - templates: Sync template changes from lorax-templates-rhel (bcl) Resolves: RHEL-54713 - tests: Add a test to make sure redhat-release-eula isn't included (bcl) Related: RHEL-54381 - Bump release - Correct grammar in Grub rescue menuentries - Add riscv64 support - Add x86_64_v2 support - Do not remove SELinux from the runtime (ppolawsk) Resolves: RHEL-126547 - Bump release version to 10.2 (bcl) Related: RHEL-126547 - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk) Resolves: RHEL-102872 - runtime-postinstall: allow pipewire to run as root (awilliam) Resolves: RHEL-102419 - runtime-cleanup: Do not clean up rpm binaries (bcl) Resolves: RHEL-101695 - Set ppc64le default boot to test the media (bcl) Resolves: RHEL-93171 - Bump release version to 10.1 (bcl) Related: RHEL-91929 - Add a boot menu for fips=1 (bcl) Resolves: RHEL-91929 - runtime-cleanup: Leave the stat binary (bcl) Resolves: RHEL-79945 - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl) Related: RHEL-67586 - tests: Fix the repos used for the test (bcl) Related: RHEL-67586 - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl) Resolves: RHEL-67586 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add x86_64_v2 support - Add riscv64 support - executils: Ignore utf-8 decode errors (bcl) Resolves: RHEL-121650 - executils: Remove binary_output flag (bcl) Related: RHEL-121650 - logging: Set encoding=UTF-8 on FileHandler (bcl) Related: RHEL-121650 - executils: Set encoding to UTF-8 for _run_program (bcl) Related: RHEL-121650 - New lorax documentation - 40.5.14 (bcl) Related: RHEL-130954 - templates: Synchronize generic templates with lorax-templates-rhel (bcl) Related: RHEL-126547 Resolves: RHEL-130954 - livemedia.ks: Increase size of root partition in example live kickstart (bcl) Resolves: RHEL-142732 - executils: decoding after deserialization (oleg.sviridov) Resolves: RHEL-121650 - templates: Synchronize generic templates with lorax-templates-rhel (bcl) Resolves: RHEL-80789 - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl) Resolves: RHEL-83202 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) Resolves: RHEL-83519 - erofs: Make smaller lzma erofs images by default (bcl) Related: RHEL-48606 - Revert "erofs: Change the erofs compression default to zstd" (bcl) Related: RHEL-48606 - erofs: Change the erofs compression default to zstd (bcl) Related: RHEL-48606 - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl) Related: RHEL-66603 - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl) Related: RHEL-66603 - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl) Related: RHEL-66603 - tests: Swap nomodeset for inst.text in mkksiso test data (bcl) Related: RHEL-66603 - templates: Change nomodeset / basic graphics to use inst.text (bcl) Resolves: RHEL-66603 - templates: Drop nomodeset / basic graphics menu from live configs (bcl) Related: RHEL-66603 - tests: Fix mkksiso unit test (bcl) Related: RHEL-61778 - pylint: Print astroid version (bcl) Related: RHEL-61778 - Extend help for --updates and --ks parameters (jkonecny) Related: RHEL-61778 - Fix --updates the updates image wasn't loaded (jkonecny) Resolves: RHEL-61778 - Implement --replace also for S390 (sebastian.stark) Related: RHEL-61778 - mkksiso: option --replace to replace arbitrary text in boot config. (sebastian.stark) Related: RHEL-61778 - livemedia: Add isomd5sum (bcl) Resolves: RHEL-58896 - templates: Sync template changes from lorax-templates-rhel (bcl) Resolves: RHEL-54713 - tests: Add a test to make sure redhat-release-eula isn't included (bcl) Related: RHEL-54381 - Bump release - Correct grammar in Grub rescue menuentries - Add riscv64 support - Add x86_64_v2 support - Do not remove SELinux from the runtime (ppolawsk) Resolves: RHEL-126547 - Bump release version to 10.2 (bcl) Related: RHEL-126547 - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk) Resolves: RHEL-102872 - runtime-postinstall: allow pipewire to run as root (awilliam) Resolves: RHEL-102419 - runtime-cleanup: Do not clean up rpm binaries (bcl) Resolves: RHEL-101695 - Set ppc64le default boot to test the media (bcl) Resolves: RHEL-93171 - Bump release version to 10.1 (bcl) Related: RHEL-91929 - Add a boot menu for fips=1 (bcl) Resolves: RHEL-91929 - runtime-cleanup: Leave the stat binary (bcl) Resolves: RHEL-79945 - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl) Related: RHEL-67586 - tests: Fix the repos used for the test (bcl) Related: RHEL-67586 - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl) Resolves: RHEL-67586 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - RHEL-62834 ignore the mode on lprint.state - RHEL-62834 Fix post scriptlet - RHEL-67908 lprint requires avahi-daemon.socket, but does not install avahi - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-62834 Fix post scriptlet - rebuilt with updated pappl - RHEL-25502 set common server settings by /etc/lprint.conf - RHEL-25806 [lprint] rebase lprint to 1.3.1 or newer upstream version - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to upstream 209f8306e95 - Rebase to upstream af7c69e1b6e - Rebase to upstream 98b74f64e76 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to upstream 9372b680418 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - B.02.20 - Remove all upstream patches - riscv64: add initial riscv64 support - Resolves "couldn't find DT_PPC64_GLINK" bug (RHEL-68373) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - disable "corrupted binary dump" test that has issues on big-endian architectures - apply upstream fix for 5.4.6 bug 1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - update to 5.4.6 - add upstream fixes for Bugs 8 and 9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add patch for http://lua-users.org/lists/lua-l/2022-02/msg00112.html (#2111138) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Don’t set locale permanently in %lua_requires (#2263837) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Don’t set locale permanently in %lua_requires (#2263837) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Align to upstream release 10 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Enable fmf init for luksmeta - Enable RHEL gating for jose - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Additional fixes up to 2.03.38. - Update to upstream version 2.03.36. - See WHATS_NEW and WHATS_NEW_DM for more information. - Update to upstream version 2.03.35. - See WHATS_NEW and WHATS_NEW_DM for more information. - Respin. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix race causing lvm2 not recognizing active devices. - Add libnvme dependency to really fix the NVMe issue. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Workaround for NVMe WWID changing after kernel update. - Fix duplicate LV names when converting pools to RAID1 with more than 2 legs. - Additional fixes up to 2.03.38. - Update to upstream version 2.03.36. - See WHATS_NEW and WHATS_NEW_DM for more information. - Update to upstream version 2.03.35. - See WHATS_NEW and WHATS_NEW_DM for more information. - Respin. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix race causing lvm2 not recognizing active devices. - Add libnvme dependency to really fix the NVMe issue. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Workaround for NVMe WWID changing after kernel update. - Fix duplicate LV names when converting pools to RAID1 with more than 2 legs. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - enable bzip2 support - add brotli build-dependency - restore formerly-empty sample files - remove a couple of obsolete workarounds for installing - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebase to latest upstream version - fix FTBFS in Fedora Rawhide (rhbz#2243829) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - %{gpgverify} sources - remove upstreamed patches - update to new upstream release - use compressed man pages - fix SIGABRT after start (rhbz#2185402) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Converted license tag to SPDX - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Converted license tag to SPDX - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.8.5 - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com> - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in> - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method - Update to 1.8.4 - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans, mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans, sa-sharada-itrans, sa-inscript, sa-iast-vedic - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> - ne-trad-ttf: Update from author, Santosh Pradhan <sapradhan8@gmail.com> - ja-trycode: Add icon. - ks-inscript: Add icon. - mai-inscript: Add icon. - ml-enhanced-inscript: Add icon. - mr-itrans: Add icon. - hi-remington: Add icon. - mr-typewriter: Add icon. - mr-phonetic: Add icon. - ne-rom-translit: Add icon. - zh-pinyin-yi: Add icon. - unicode: Add icon. - da-post: Add icon. - bo-ewts: Add icon. - bo-tcrc: Add icon. - kn-typewriter: Add icon. - grc-mizuochi: Add icon. - fr-azerty: Add icon. - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes. - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" New option "with-backslash-prefix". - ks-kbd: Fix typo in description, add icon. - ug-kbd: Add icon. - tai-sonla-kbd.png: Add icon. - mni-inscript2-mtei.png: Add icon. - sat-inscript2-olck.png: Add icon. - or-phonetic.png: Add icon. - sa-harvard-kyoto.png: Add icon. - pa-anmollipi.png: Add icon. - pa-remington.png: Add icon. - si-singlish.png: Add icon. - ta-lk-renganathan.png: Add icon. - te-rts.png: Add icon. - vi-han.png: Add icon. - vi-nomvni: Make existing icon work. - vi-nomtelex: Make existing icon work. - lsymbol: Add icon. - ssymbol: Add icon. - Update to 1.8.3 - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0 - ta-vutam: Change the header comment to a description - mr-gamabhana: icon resized to 48x48 - latn1-pre: add icon - ar-translit: add icon - ath-phonetic: add icon - bla-phonetic: add icon - cr-western: add icon - iu-phonetic: add icon - nsk-phonetic: add icon - oj-phonetic: add icon - uk-kbd: add icon - eo-vi-sistemo: add icon - Rename the .mim files of some eo input methods to improve search for the icons - Workarounds for doxygen - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.8.2 - Remove bn-national-jatiya input method (included upstream) - Remove si-sayura input method (included upstream) - Remove mr-gamabhana input method (included upstream) - Update German translations (100%) - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream) - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch This patch is not needed, numbers are typed in language representation when using the number pad with numlock on even without this patch. (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634 is still fixed) - Add icon for hu-rovas-post input method - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0 after these upstream changes to kn-itrans, the summary added by the patch is wrong) - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless these mappings might be useful to some users, better keep them for the time being) - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream) - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream) - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream) (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512) - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping - Update to 1.8.1 - Remove inscript2-20210820.tar.gz because it is now included upstream - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream - Remove unicode.mim because the improvement is included upstream - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.8.4 - Fixes “typedef in m17n-core.h causing error when compiling with C++ code” (Resolves: https://savannah.nongnu.org/bugs/index.php?64566) - Rebuild(libotf) - Update to 1.8.3 - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.8.2 - Fix parallel builds by switching from absolute to relative paths (Resolves: https://savannah.nongnu.org/bugs/index.php?61377) - enable parallel builds in the spec file - Update to 1.8.1 - Remove m17n-lib-c99.patch (included upstream) - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch (included upstream) - Fix C99 compatibility issue in example code - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX licenses (#2222092). - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix patch to increase MAX_NAME to 16384 - Resolves: RHEL-93654 - Increase MAX_NAME to 16384 - Resolves: RHEL-93654 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix the Source numbering in installation - Resolves: BZ#2242757 - Add GPG verify on the package - Rebase to version 2.12.0 - Patch0 was upstreamed - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 3.4.4 - Disable option that requires all connections to be SSL encrypted by default - Rebase to 3.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 3.4.1 - Rebase to 3.3.10 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to 3.3.8 - CVE-2026-44172 fix - Rebase to 3.4.4 - Disable option that requires all connections to be SSL encrypted by default - Rebase to 3.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 3.4.1 - Rebase to 3.3.10 - Rebase to 3.2.4 - Rebase to 3.2.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 3.2.2 GA - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to 3.2.1 RC - Fix minimal required version of mariadb-connector-c as per: https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/ - Rebase to 3.1.20 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Synchronize with Fedora version - Rebuild without generated Requires - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to version 3.3.2 - Rebase to version 3.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebase to version 3.1.4 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Mark RISC-V64 as 64-bit architecture - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Mark RISC-V64 as 64-bit architecture - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on c10s - Resolves: RHEL-115468 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Add missing configuration file for maven-openjdk25 - Add maven-openjdk25 binding - Update to upstream version 3.9.9 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Drop OpenJDK 17 subpackage - Resolves: RHEL-51273 - Bump release for Aug 2024 java mass rebuild - Rebuild - Drop openjdk8 and openjdk11 subpackages - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add missing configuration file for maven-openjdk25 - Add maven-openjdk25 binding - Update to upstream version 3.9.9 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Drop OpenJDK 17 subpackage - Resolves: RHEL-51273 - Bump release for Aug 2024 java mass rebuild - Rebuild - Drop openjdk8 and openjdk11 subpackages - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add missing configuration file for maven-openjdk25 - Add maven-openjdk25 binding - Update to upstream version 3.9.9 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Drop OpenJDK 17 subpackage - Resolves: RHEL-51273 - Bump release for Aug 2024 java mass rebuild - Rebuild - Drop openjdk8 and openjdk11 subpackages - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add missing configuration file for maven-openjdk25 - Add maven-openjdk25 binding - Update to upstream version 3.9.9 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Drop OpenJDK 17 subpackage - Resolves: RHEL-51273 - Bump release for Aug 2024 java mass rebuild - Rebuild - Drop openjdk8 and openjdk11 subpackages - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update to upstream version 1.9.18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 1.9.15 - Build with default JDK 17 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild - Update to upstream version 3.4.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update Java compiler target settings - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Switch Java compiler source/target to 1.8 - Resolves: RHEL-52700 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 3.5.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - update to 4.8.31 - drop upstreamed python3 patch - rename fish -> shell - drop obsolete smb option - Disable gpm on ELN - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 4.8.30 - remove upstreamed mc-configure-c99.patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - update to 4.8.29 - Port configure script to C99 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0 - Note upstream moved default script location from /etc/mdevctl.d/scripts.d to /usr/lib/mdevctl/scripts.d. Both locations are currently supported, the new locations is recommended. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuild for fixed frame pointer compiler flags in Rust RPM macros. - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build). - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration (ljavorsk) - Use %license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration (ljavorsk) - Use %license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration (ljavorsk) - Use %license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Stop verifying active selinux module - Remove obsolete tests - Bump release for June 2024 mass rebuild - Fix License tags to conform with SPDX - Resolves: RHEL-35721 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.6.23 - Resolves: rhbz#2257644 - Update license tag to fully conform to SPDX - Update to 1.6.22 - Resolves: rhbz#2244603 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix timing side-channel in SASL password database authentication (CVE-2026-47783) - Resolves: RHEL-179083 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Stop verifying active selinux module - Remove obsolete tests - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Stop verifying active selinux module - Remove obsolete tests - Bump release for June 2024 mass rebuild - Fix License tags to conform with SPDX - Resolves: RHEL-35721 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.6.23 - Resolves: rhbz#2257644 - Update license tag to fully conform to SPDX - Update to 1.6.22 - Resolves: rhbz#2244603 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix timing side-channel in SASL password database authentication (CVE-2026-47783) - Resolves: RHEL-179083 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Stop verifying active selinux module - Remove obsolete tests - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream latest release. - Fix crash when wrong reporter type is used. - Fix a few tracing error. - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - AlmaLinux changes: Add LLVM 21 support for gallivm (riscv64) - Enable gating - Initial commit on c10s Resolves: https://issues.redhat.com/browse/RHEL-132414 - AlmaLinux changes: Add LLVM 21 support for gallivm (riscv64) - Enable gating - Initial commit on c10s Resolves: https://issues.redhat.com/browse/RHEL-132414 - AlmaLinux changes: Add LLVM 21 support for gallivm (riscv64) - Enable gating - Initial commit on c10s Resolves: https://issues.redhat.com/browse/RHEL-132414 - AlmaLinux changes: Add LLVM 21 support for gallivm (riscv64) - Enable gating - Initial commit on c10s Resolves: https://issues.redhat.com/browse/RHEL-132414 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Split xdriinfo into its own package - Remove xdriinfo additional source build and autotools dependencies - SPDX migration: license is already SPDX compatible - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Install all necessary shader files (#1373299) - Update to 9.0.0 - Enable vulkan demos - Update to 8.5.0 - Change build system to meson - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions - Enable va-driver only in Fedora - Rebuild mesa with LLVM 21 - Update to 25.2.7 - Bump release after rpmautospec re-init - Disable LTO globally - Update to 25.2.5 - fix llvmpipe constant loads on s390x - Enable NVK driver - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions - Enable va-driver only in Fedora - Rebuild mesa with LLVM 21 - Update to 25.2.7 - Bump release after rpmautospec re-init - Disable LTO globally - Update to 25.2.5 - fix llvmpipe constant loads on s390x - Enable NVK driver - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions - Enable va-driver only in Fedora - Rebuild mesa with LLVM 21 - Update to 25.2.7 - Bump release after rpmautospec re-init - Disable LTO globally - Update to 25.2.5 - fix llvmpipe constant loads on s390x - Enable NVK driver - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions - Enable va-driver only in Fedora - Rebuild mesa with LLVM 21 - Update to 25.2.7 - Bump release after rpmautospec re-init - Disable LTO globally - Update to 25.2.5 - fix llvmpipe constant loads on s390x - Enable NVK driver - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions - Enable va-driver only in Fedora - Rebuild mesa with LLVM 21 - Update to 25.2.7 - Bump release after rpmautospec re-init - Disable LTO globally - Update to 25.2.5 - fix llvmpipe constant loads on s390x - Enable NVK driver - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions - Enable va-driver only in Fedora - Rebuild mesa with LLVM 21 - Update to 25.2.7 - Bump release after rpmautospec re-init - Disable LTO globally - Update to 25.2.5 - fix llvmpipe constant loads on s390x - Enable NVK driver - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt without gl-manpages - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Update to 9.0.3 - Move to meson build - Set gl_provider to libglvnd - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt without gl-manpages - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Update to 9.0.3 - Move to meson build - Set gl_provider to libglvnd - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions - Enable va-driver only in Fedora - Rebuild mesa with LLVM 21 - Update to 25.2.7 - Bump release after rpmautospec re-init - Disable LTO globally - Update to 25.2.5 - fix llvmpipe constant loads on s390x - Enable NVK driver - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions - Enable va-driver only in Fedora - Rebuild mesa with LLVM 21 - Update to 25.2.7 - Bump release after rpmautospec re-init - Disable LTO globally - Update to 25.2.5 - fix llvmpipe constant loads on s390x - Enable NVK driver - AlmaLinux changes: Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions - Enable va-driver only in Fedora - Rebuild mesa with LLVM 21 - Update to 25.2.7 - Bump release after rpmautospec re-init - Disable LTO globally - Update to 25.2.5 - fix llvmpipe constant loads on s390x - Enable NVK driver - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add RHEL gating configuration - CI: Run upstream testsuite - Merge plans/integration.fmf into plan.fmf - Add smoke test for tmt - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.6.0 (rhbz#rhbz#2251885) - Update to 1.5.2 - RHEL-148234 Move CoInitialize/CoInitializeSecurity to main process thread - RHEL-56925 Implement guest-network-get-route for Windows - RHEL-141691 Rebase mingw-qemu-ga-win to QEMU 10.2.0 - RHEL-111001 Rebase mingw-qemu-ga-win to QEMU 10.1.0 - RHEL-107458 [mingw-qemu-ga-win] QAPI error desc does not contain Windows error - RHEL-107446 QGA VSS wasn't removed if the QGA installation fail and quit - RHEL-107215 Fix don't daemonize before channel is initialized patch for Windows behavior - RHEL-107174 QGA can't be installed before vioserial driver or without serial port configured - RHEL-104252 QAPI error desc does not contain Windows error - RHEL-83547 - Rebase mingw-qemu-ga-win to QEMU 10.0.0 - RHEL-96980 - mingw-qga: Drop mingw-pixman build deps - RHEL-98947 - [mingw-qemu-ga-win] MSI installer ignore VSS installation result - RHEL-11824 - [QGA] VSS installation retry, if previously VSS service was not un-registered correctly - RHEL-71884 - [qemu-guest-agent][RFE] Report CPU load average for Windows VMs - RHEL-74469 - Rebuild mingw-qemu-ga-win package due to deps update - Fix version release - RHEL-70468 - win server 2k25 guest agent shows wrong output os version - RHEL-70468 - win server 2k25 guest agent shows wrong output os version - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration: update to SPDX-compatible identifiers - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - update plans - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fixup! Update to 5.5.20 (#2242798) - Update to 5.5.20 (#2242798) - Update to 5.5.18 (#2224795) - Use self-contained gnupg home for source verification (#2225463) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Change License tag to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to spdx license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream release 20230416 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to upstream release 20221107 - Bump release for October 2024 mass rebuild: - Fix gating - Added gating.yaml and test for mod_auth_gssapi - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild Rebase to version 2.4.16.11 - Resolves: RHEL-86213 Rebase to version 2.4.16.10 - Resolves: RHEL-85518 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 Add gating tests - Bump release for June 2024 mass rebuild Rebase to version 2.4.15 - Resolves: rhbz#2244098 - mod_auth_openidc-2.4.15 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild Rebase to 2.4.14.3 version - Resolves: rhbz#2204524 - mod_auth_openidc-2.4.14.3 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix CVE-2026-54789: out-of-bounds read/write in state cookie parsing - Resolves: RHEL-248045 Rebase to version 2.4.16.11 - Resolves: RHEL-86213 Rebase to version 2.4.16.10 - Resolves: RHEL-85518 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - mod_dav_svn: inherit DavBasePath from mod_dav Resolves: RHEL-105424 - update to 1.14.5 (#2331047) - use %autosetup - enable tests by default again - conditionalize Ruby tests (Yaakov Selkowitz) - Rebase to version 1.14.4 - Resolves: rhbz#2317222 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Fix debuginfo building and stop building ruby and java subpackages - Resolves: RHEL-52974 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building with gcc 14 - incompatible-pointer-types warnings became errors, but they've been present for a long time and posed no threat, thus revert the behaviour - Resolves: rhbz#2259155 - Fix testing of binary patch - Resolves: rhbz#2255746 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - sync from c9s - switch to using anonymous shm by default Resolves: RHEL-50029 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - new version 2.0.29 - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - new version 2.0.26 - new version 2.0.25 - new version 2.0.22 - Resolves: RHEL-182410 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) - Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - new version 2.0.29 - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) - Bump release for June 2024 mass rebuild - Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913 - Resolves: RHEL-182410 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) - Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - new version 2.0.29 - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) - Bump release for June 2024 mass rebuild - Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - new version 2.0.29 - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - new version 2.4.63 - Resolves: RHEL-76358 - httpd rebase to 2.4.63 - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket) configured in .htaccess doesn't work on httpd-2.4.62-1 - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - new version 2.4.63 - Resolves: RHEL-76358 - httpd rebase to 2.4.63 - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket) configured in .htaccess doesn't work on httpd-2.4.62-1 - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-134483 - httpd: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - update to 2.4.26 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Resolves: RHEL-175647 - mod_md: OCSP response limits (CVE-2026-29168) - Resolves: RHEL-134484 - httpd: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-82256 - Update deprecated misspeled EnableMCPMReceive directive - Resolves: RHEL-80480 Rebase mod_proxy_cluster to upstream 1.3.22.Final release - Resolves: RHEL-76000 Rebase mod_proxy_cluster to upstream 1.3.21.Final release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - First build - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - new version 2.4.63 - Resolves: RHEL-76358 - httpd rebase to 2.4.63 - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket) configured in .htaccess doesn't work on httpd-2.4.62-1 - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - new version 2.4.63 - Resolves: RHEL-76358 - httpd rebase to 2.4.63 - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket) configured in .htaccess doesn't work on httpd-2.4.62-1 - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - new version 2.4.63 - Resolves: RHEL-76358 - httpd rebase to 2.4.63 - Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket) configured in .htaccess doesn't work on httpd-2.4.62-1 - Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API Resolves: RHEL-105255 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99962 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-103489 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration (CVE-2026-29167) - Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc (CVE-2026-42536) - Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass (CVE-2026-34355) - Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server (CVE-2026-44185) - Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via crafted regular expressions (CVE-2026-44631) - Resolves : RHEL-182581 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169) - Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535, CVE-2026-24072, CVE-2026-33006, CVE-2026-43951 - Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131829 - Fix error page messaging when error handling fails - Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when updating system in image mode - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - add /usr/share/doc/mpfr ownership to the main package as well (RHEL-36695) - add /usr/share/doc/mpfr ownership (RHEL-36695) - fix use of uninitialized value in sin_cos (RHEL-44912) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebase to 1.32.9, include patches for CVE-2024-10573 Resolves: RHEL-69787 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.31.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.31.2 - Rebase to 1.32.9, include patches for CVE-2024-10573 Resolves: RHEL-69787 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.31.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.31.2 - Rebase to 1.32.9, include patches for CVE-2024-10573 Resolves: RHEL-69787 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.31.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.31.2 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects find the available MPI enabled packages, libraries, executables, etc. - Drop dependency on ftbfs infinipath-psm - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert license tag to SPDX - Own %{_fmoddir}/mpich - Create directories for MPICH package development files - Mpich should own cmake and include install directories - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects find the available MPI enabled packages, libraries, executables, etc. - Drop dependency on ftbfs infinipath-psm - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert license tag to SPDX - Own %{_fmoddir}/mpich - Create directories for MPICH package development files - Mpich should own cmake and include install directories - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects find the available MPI enabled packages, libraries, executables, etc. - Drop dependency on ftbfs infinipath-psm - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert license tag to SPDX - Own %{_fmoddir}/mpich - Create directories for MPICH package development files - Mpich should own cmake and include install directories - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects find the available MPI enabled packages, libraries, executables, etc. - Drop dependency on ftbfs infinipath-psm - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert license tag to SPDX - Own %{_fmoddir}/mpich - Create directories for MPICH package development files - Mpich should own cmake and include install directories - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - update to version 0.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add support for Image Mode Resolves: RHEL-142231 - Remove redundand restorecon call, redirect safe to ignore output to /dev/null, mark module directory to avoid rpm verification Resolves: RHEL-67894 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix symlink-following chown of pid file in daemon mode (CVE-2026-72694) Resolves: RHEL-236045 - Add support for Image Mode Resolves: RHEL-142231 - Remove redundand restorecon call, redirect safe to ignore output to /dev/null, mark module directory to avoid rpm verification Resolves: RHEL-67894 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add support for Image Mode Resolves: RHEL-142231 - Remove redundand restorecon call, redirect safe to ignore output to /dev/null, mark module directory to avoid rpm verification Resolves: RHEL-67894 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix symlink-following chown of pid file in daemon mode (CVE-2026-72694) Resolves: RHEL-236045 - Add support for Image Mode Resolves: RHEL-142231 - Remove redundand restorecon call, redirect safe to ignore output to /dev/null, mark module directory to avoid rpm verification Resolves: RHEL-67894 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to upstream release 4.34.0 - Bump Release after re-initializing rpmautospec - Update to v4.32.0 + upstream build fixes - Update to upstream release 4.30.0 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Fix annocheck failure - Disable openssl - Fix debuginfo - Add gating tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - rebased to 1.7 (#2189101) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration: mark license as SPDX compatible - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - fix SAST issues (RHEL-40015) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Added upstream patch to fix segmentation fault for '-r' (#2188394) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - convert license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix CVE-2026-25506 - Bump release for October 2024 mass rebuild: - Adding files for c10s gating test - Bump release for June 2024 mass rebuild - Fix CVE-2026-25506 - Bump release for October 2024 mass rebuild: - Adding files for c10s gating test - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebuild for updated testing (2x) - update to 2.2.13 (RHEL-52596) - trim changelog to last 10y - Remove docbook2X BuildRequire dependency as it is being deprecated - Resolves: RHEL-45561 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix C99 compatibility issue - Upgrade to 2.2.12 - Resolves: #2232712 - Upgrade to 2.2.11 - Resolves: #2232712 - Fix flaky popup test - Fix flaky test case - Update to 49.4 - Update to 49.1.1 - Bundle newer meson - Use SPDX license - Deduce source URL from version - Fix path to gdctl when running installed test - Backport gdctl utility - Fix polyinstantiation preventing Xwayland to start - Handle unmaximize when headless - Fix flaky popup test - Fix flaky test case - Update to 49.4 - Update to 49.1.1 - Bundle newer meson - Use SPDX license - Deduce source URL from version - Fix path to gdctl when running installed test - Backport gdctl utility - Fix flaky popup test - Fix flaky test case - Update to 49.4 - Update to 49.1.1 - Bundle newer meson - Use SPDX license - Deduce source URL from version - Fix path to gdctl when running installed test - Backport gdctl utility - Fix polyinstantiation preventing Xwayland to start - Handle unmaximize when headless - Fix flaky popup test - Fix flaky test case - Update to 49.4 - Update to 49.1.1 - Bundle newer meson - Use SPDX license - Deduce source URL from version - Fix path to gdctl when running installed test - Backport gdctl utility - Update to version 1.0.14 - Resolves: rhbz#2380217 - Rebase to 1.0.13 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2nd attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705 (Michal Schorm) - Resolves rhbz#2250424 - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm) - Resolves rhbz#2250360 - Bump release for rebuild - Empty commit to test Fedora PACKIT configuration for packaging automation (Michal Schorm) - Add riscv64 support - Rebase to 8.4.11 - Rebase to 8.4.9 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Add riscv64 support - Rebase to 8.4.9 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.4 - Add riscv64 support - Rebase to 8.4.11 - Rebase to 8.4.9 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Add riscv64 support - Rebase to 8.4.9 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.4 - Add riscv64 support - Rebase to 8.4.11 - Rebase to 8.4.9 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Add riscv64 support - Rebase to 8.4.9 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.4 - Add riscv64 support - Rebase to 8.4.11 - Rebase to 8.4.9 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Add riscv64 support - Rebase to 8.4.9 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.4 - Add riscv64 support - Rebase to 8.4.11 - Rebase to 8.4.9 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Add riscv64 support - Rebase to 8.4.9 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Skip tests that are failing on Konflux - Resolves: ROK-831 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebuilt - Rebase to 8.4.4 - Add rpminspect.yaml to ignore problematic desktop test - Update to 47.6 - Update to 47.1 - Exclude flatpak-specific files - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 46.2 - Update to 46.1 - Update to 46.0 - Update to 46.rc - Add rpminspect.yaml to ignore problematic desktop test - Update to 47.6 - Update to 47.1 - Exclude flatpak-specific files - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 46.2 - Update to 46.1 - Update to 46.0 - Update to 46.rc - Rebase to libnbd 1.24.1 resolves: RHEL-111243 - Synch spec file with Fedora - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution resolves: RHEL-129296 - Implement Post-Quantum Cryptography (PQC) resolves: RHEL-101267 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - cow: Support overlays larger than 16T on ext4 + further fixes resolves: RHEL-164229 - Rebase to nbdkit 1.46.2 - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp from nbdkit 1.47. resolves: RHEL-111242 - Synchronize spec file with Fedora. - vddk: Don't use FNM_PATHNAME when matching export parameter resolves: RHEL-122755 - Fix assertion failure in blocksize-policy filter - Fix v2v conversion failure when minimum_io_size > 64K resolves: RHEL-139390 - Test and document that VDDK 9.0.1.0 works resolves: RHEL-140615 - Rebase to nbdkit 1.44.1 resolves: RHEL-78830, RHEL-101180 - Synch the spec file with Fedora Rawhide. - nbdkit-ondemand-plugin moves into a new subpackage. - New nbdkit-count-filter & nbdkit-time-limit-filter. - Remove nbdkit-cacheextents-filter. - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85515 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89371 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94825 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95364 - vddk: Improve statistics related: RHEL-94825 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95819 - Add support for VDDK 9.0.0.0 resolves: RHEL-99467 - server: Fix .zero fallback path resolves: RHEL-101636 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71697 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to nbdkit 1.40.4 - Rebase to nbdkit 1.40.0 related: RHEL-49594 - Send the last error to the NBD client resolves: RHEL-50666 - Re-add libxcrypt dependency resolves: RHEL-47272 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - fix buffer overflow in infocmp -i (CVE-2025-69720) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - fix buffer overflow in infocmp -i (CVE-2025-69720) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - fix buffer overflow in infocmp -i (CVE-2025-69720) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - fix creation of /var/lib/net-snmp in image mode (RHEL-132654) - fix out-of-bound access issue (RHEL-137498) - fix use after free issue (RHEL-121405) - Enable PQC in net-snmp (RHEL-93087) - Fix inverted use of -n in snmptrapd_log.c (RHEL-110514) - Resolves: RHEL-81121 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - update license tag and remove tests folder - Fix licensing issue in source code (RHEL-46905) - Add gating.yaml file - fix creation of /var/lib/net-snmp in image mode (RHEL-132654) - fix out-of-bound access issue (RHEL-137498) - fix use after free issue (RHEL-121405) - Enable PQC in net-snmp (RHEL-93087) - Fix inverted use of -n in snmptrapd_log.c (RHEL-110514) - Resolves: RHEL-81121 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - update license tag and remove tests folder - Fix licensing issue in source code (RHEL-46905) - Add gating.yaml file - fix creation of /var/lib/net-snmp in image mode (RHEL-132654) - fix out-of-bound access issue (RHEL-137498) - fix use after free issue (RHEL-121405) - Enable PQC in net-snmp (RHEL-93087) - Fix inverted use of -n in snmptrapd_log.c (RHEL-110514) - Resolves: RHEL-81121 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - update license tag and remove tests folder - Fix licensing issue in source code (RHEL-46905) - Add gating.yaml file - fix creation of /var/lib/net-snmp in image mode (RHEL-132654) - fix out-of-bound access issue (RHEL-137498) - fix use after free issue (RHEL-121405) - Enable PQC in net-snmp (RHEL-93087) - Fix inverted use of -n in snmptrapd_log.c (RHEL-110514) - Resolves: RHEL-81121 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - update license tag and remove tests folder - Fix licensing issue in source code (RHEL-46905) - Add gating.yaml file - fix creation of /var/lib/net-snmp in image mode (RHEL-132654) - fix out-of-bound access issue (RHEL-137498) - fix use after free issue (RHEL-121405) - Enable PQC in net-snmp (RHEL-93087) - Fix inverted use of -n in snmptrapd_log.c (RHEL-110514) - Resolves: RHEL-81121 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - update license tag and remove tests folder - Fix licensing issue in source code (RHEL-46905) - Add gating.yaml file - fix creation of /var/lib/net-snmp in image mode (RHEL-132654) - fix out-of-bound access issue (RHEL-137498) - fix use after free issue (RHEL-121405) - Enable PQC in net-snmp (RHEL-93087) - Fix inverted use of -n in snmptrapd_log.c (RHEL-110514) - Resolves: RHEL-81121 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - update license tag and remove tests folder - Fix licensing issue in source code (RHEL-46905) - Add gating.yaml file - fix creation of /var/lib/net-snmp in image mode (RHEL-132654) - fix out-of-bound access issue (RHEL-137498) - fix use after free issue (RHEL-121405) - Enable PQC in net-snmp (RHEL-93087) - Fix inverted use of -n in snmptrapd_log.c (RHEL-110514) - Resolves: RHEL-81121 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - update license tag and remove tests folder - Fix licensing issue in source code (RHEL-46905) - Add gating.yaml file - update to https://github.com/containers/netavark/releases/tag/v1.17.2 - Related: RHEL-122178 - update to https://github.com/containers/netavark/releases/tag/v1.17.1 - Related: RHEL-122178 - update to https://github.com/containers/netavark/releases/tag/v1.16.1 - Related: RHEL-80817 - update to https://github.com/containers/netavark/releases/tag/v1.16.0 - Related: RHEL-80817 - update to https://github.com/containers/netavark/releases/tag/v1.15.2 - Related: RHEL-80817 - update to https://github.com/containers/netavark/releases/tag/v1.15.1 - Related: RHEL-80817 - update to https://github.com/containers/netavark/releases/tag/v1.15.0 - Related: RHEL-80817 - update to https://github.com/containers/netavark/releases/tag/v1.14.1 - Related: RHEL-80817 - update to https://github.com/containers/netavark/releases/tag/v1.14.0 - Related: RHEL-58990 - update to https://github.com/containers/netavark/releases/tag/v1.13.1 - Related: RHEL-58990 - New upstream release 11.09.00 - Review and update license field (RHEL-64359) - build netpbm with correct LDFLAGS (RHEL-70899) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - GCC 14 compatibility fixes: Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450) Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for jasper 4.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - New upstream release 11.09.00 - Review and update license field (RHEL-64359) - build netpbm with correct LDFLAGS (RHEL-70899) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - GCC 14 compatibility fixes: Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450) Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for jasper 4.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100597 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112268 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106727 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116861 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125744 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138646 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 - Reduce time to detect hanging builds - Resolves: RHEL-191644 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163400 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152947 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144971 - Update to nettle 3.10.1 - Bump release for October 2024 mass rebuild: - Initial CI and gating setup for RHEL-10 - Switch from hobbling to patching to disable algorithms - Update to nettle 3.10 - Bump release for June 2024 mass rebuild - Split "fips" bcond into "fipshmac" and "bundle_gmp" - Update hobble-nettle to disable SM4 again - Bundle GMP to privatize memory functions - Disable HMAC in RHEL 9+ - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.36.0 release - migrate to SPDX license - Update to 1.34.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.32.0 release - applet: use appindicator if we can outside of X11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 0.52.24 - convert license tag to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - update to 0.52.23 - update to 0.52.22 - mountd: Minor refactor of get_rootfh() (RHEL-127093) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093) - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093) - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093) - Add requires for selinux-policy (RHEL-127093) Resolves: CVE-2025-12801 - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562) - Remove /var/lib/nfs/v4recovery (RHEL-137935) - gssd: protect kerberos ticket cache access (RHEL-138461) - nfsrahead: modify get_device_info logic (RHEL-115964) - Fix dependency definition in rpc-statd.service (RHEL-96937) - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768) Resolves: RHEL-71286 Resolves: RHEL-82418 Resolves: RHEL-82557 Resolves: RHEL-85409 Resolves: RHEL-85413 Resolves: RHEL-88768 - fix ownership of /var/lib/nfs/statd/state (RHEL-77913) - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912) - version handling fixes for nfsdctl and rpc.nfsd (RHEL-72477) - nfsdcltrack related manpage and configure file cleanup (RHEL-73500) - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786) Resolves: RHEL-65826 Resolves: RHEL-67041 Resolves: RHEL-67168 Resolves: RHEL-67786 Resolves: RHEL-68575 - mountd: Minor refactor of get_rootfh() (RHEL-127093) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127093) - support: Add a mini-library to extract and apply RPC credentials (RHEL-127093) - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093) - Add requires for selinux-policy (RHEL-127093) Resolves: CVE-2025-12801 - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562) - Remove /var/lib/nfs/v4recovery (RHEL-137935) - gssd: protect kerberos ticket cache access (RHEL-138461) - nfsrahead: modify get_device_info logic (RHEL-115964) - Fix dependency definition in rpc-statd.service (RHEL-96937) - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768) Resolves: RHEL-71286 Resolves: RHEL-82418 Resolves: RHEL-82557 Resolves: RHEL-85409 Resolves: RHEL-85413 Resolves: RHEL-88768 - fix ownership of /var/lib/nfs/statd/state (RHEL-77913) - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912) - version handling fixes for nfsdctl and rpc.nfsd (RHEL-72477) - nfsdcltrack related manpage and configure file cleanup (RHEL-73500) - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786) Resolves: RHEL-65826 Resolves: RHEL-67041 Resolves: RHEL-67168 Resolves: RHEL-67786 Resolves: RHEL-68575 - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Run tests in centos-stream namespace - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191778 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178669 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182544 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176231 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - rebuild for the right candidate tag - RHEL-159547 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159526 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159434 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157875 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Clarify binding behavior of -t option. - Remove 50x.html from the nginx package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.36.0 release - migrate to SPDX license - Update to 1.34.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.32.0 release - applet: use appindicator if we can outside of X11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Account for VLAN header in pcap packets - Update location of fmf plans - Bump release for October 2024 mass rebuild: - Support EMS in ssl-enum-ciphers - Downgrade Nmap to 7.92 to fix NPSL licensing issue - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides - Fix broken gating - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Account for VLAN header in pcap packets - Update location of fmf plans - Bump release for October 2024 mass rebuild: - Support EMS in ssl-enum-ciphers - Downgrade Nmap to 7.92 to fix NPSL licensing issue - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides - Fix broken gating - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-1417 - alt-name: Remove alt-names when interface marked as absent. RHEL-126481 - hsr: Automatically disable IP on hsr port. RHEL-100774 - hsr: add support for configuring "interlink" property. RHEL-100766 - Support referring alternative-name as port/parent/next-hop-interface. RHEL-126508 - Support referring interface name using its alternative name. RHEL-126510 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158) - Support setting protocol version of HSR/PRP. (RHEL-100763) - Fix inconsistent interface order. (RHEL-130157) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-119046 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-125548 - Align with libreswan default values. RHEL-26350 - Support rightca ipsec option. RHEL-114237 - Fix error when changing existing HSR interface. RHEL-100773 - Upgrade to 2.2.54 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121418 - Upgrade to 2.2.52 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. - Introduce state: ignore for route. - Support PCI address matching in gen_conf. - Support MacSec interface in gen_conf. - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135 - Fix setting DNS only with search or option. RHEL-102333 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-37922 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415 - Support matching by PCI adress. RHEL-80116 - Apply dispatch changes first. RHEL-94840 - Fix SRIOV VF reference. RHEL-91588 - Fix deleting with `fail_over_mac` bond. RHEL-102600 - Upgrade to 2.2.46 - Store DNS to both iface and global DNS. RHEL-91250 - Support nmpolicy against down iface. RHEL-86240 - Support removal VLAN connection with empty ifname. RHEL-92916 - Upgrade to 2.2.45 - Fix stuck on `nmstatectl show`. RHEL-93154 - Fix infiniband devices - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170697 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151937 - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-1417 - alt-name: Remove alt-names when interface marked as absent. RHEL-126481 - hsr: Automatically disable IP on hsr port. RHEL-100774 - hsr: add support for configuring "interlink" property. RHEL-100766 - Support referring alternative-name as port/parent/next-hop-interface. RHEL-126508 - Support referring interface name using its alternative name. RHEL-126510 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158) - Support setting protocol version of HSR/PRP. (RHEL-100763) - Fix inconsistent interface order. (RHEL-130157) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-119046 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-125548 - Align with libreswan default values. RHEL-26350 - Support rightca ipsec option. RHEL-114237 - Fix error when changing existing HSR interface. RHEL-100773 - Upgrade to 2.2.54 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121418 - Upgrade to 2.2.52 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. - Introduce state: ignore for route. - Support PCI address matching in gen_conf. - Support MacSec interface in gen_conf. - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135 - Fix setting DNS only with search or option. RHEL-102333 - Ignore IP addresses with non-kernel IFA_PROTO RHEL-253627 - Fix infiniband devices - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170697 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151937 - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-1417 - alt-name: Remove alt-names when interface marked as absent. RHEL-126481 - hsr: Automatically disable IP on hsr port. RHEL-100774 - hsr: add support for configuring "interlink" property. RHEL-100766 - Support referring alternative-name as port/parent/next-hop-interface. RHEL-126508 - Support referring interface name using its alternative name. RHEL-126510 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158) - Support setting protocol version of HSR/PRP. (RHEL-100763) - Fix inconsistent interface order. (RHEL-130157) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-119046 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-125548 - Align with libreswan default values. RHEL-26350 - Support rightca ipsec option. RHEL-114237 - Fix error when changing existing HSR interface. RHEL-100773 - Upgrade to 2.2.54 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121418 - Upgrade to 2.2.52 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. - Introduce state: ignore for route. - Support PCI address matching in gen_conf. - Support MacSec interface in gen_conf. - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-1417 - alt-name: Remove alt-names when interface marked as absent. RHEL-126481 - hsr: Automatically disable IP on hsr port. RHEL-100774 - hsr: add support for configuring "interlink" property. RHEL-100766 - Support referring alternative-name as port/parent/next-hop-interface. RHEL-126508 - Support referring interface name using its alternative name. RHEL-126510 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158) - Support setting protocol version of HSR/PRP. (RHEL-100763) - Fix inconsistent interface order. (RHEL-130157) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-119046 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-125548 - Align with libreswan default values. RHEL-26350 - Support rightca ipsec option. RHEL-114237 - Fix error when changing existing HSR interface. RHEL-100773 - Upgrade to 2.2.54 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121418 - Upgrade to 2.2.52 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. - Introduce state: ignore for route. - Support PCI address matching in gen_conf. - Support MacSec interface in gen_conf. - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135 - Fix setting DNS only with search or option. RHEL-102333 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-37922 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415 - Support matching by PCI adress. RHEL-80116 - Apply dispatch changes first. RHEL-94840 - Fix SRIOV VF reference. RHEL-91588 - Fix deleting with `fail_over_mac` bond. RHEL-102600 - Upgrade to 2.2.46 - Store DNS to both iface and global DNS. RHEL-91250 - Support nmpolicy against down iface. RHEL-86240 - Support removal VLAN connection with empty ifname. RHEL-92916 - Upgrade to 2.2.45 - Fix stuck on `nmstatectl show`. RHEL-93154 - Fix infiniband devices - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170697 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151937 - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-1417 - alt-name: Remove alt-names when interface marked as absent. RHEL-126481 - hsr: Automatically disable IP on hsr port. RHEL-100774 - hsr: add support for configuring "interlink" property. RHEL-100766 - Support referring alternative-name as port/parent/next-hop-interface. RHEL-126508 - Support referring interface name using its alternative name. RHEL-126510 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158) - Support setting protocol version of HSR/PRP. (RHEL-100763) - Fix inconsistent interface order. (RHEL-130157) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-119046 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-125548 - Align with libreswan default values. RHEL-26350 - Support rightca ipsec option. RHEL-114237 - Fix error when changing existing HSR interface. RHEL-100773 - Upgrade to 2.2.54 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121418 - Upgrade to 2.2.52 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. - Introduce state: ignore for route. - Support PCI address matching in gen_conf. - Support MacSec interface in gen_conf. - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135 - Fix setting DNS only with search or option. RHEL-102333 - Ignore IP addresses with non-kernel IFA_PROTO RHEL-253627 - Fix infiniband devices - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170697 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151937 - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-1417 - alt-name: Remove alt-names when interface marked as absent. RHEL-126481 - hsr: Automatically disable IP on hsr port. RHEL-100774 - hsr: add support for configuring "interlink" property. RHEL-100766 - Support referring alternative-name as port/parent/next-hop-interface. RHEL-126508 - Support referring interface name using its alternative name. RHEL-126510 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158) - Support setting protocol version of HSR/PRP. (RHEL-100763) - Fix inconsistent interface order. (RHEL-130157) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-119046 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-125548 - Align with libreswan default values. RHEL-26350 - Support rightca ipsec option. RHEL-114237 - Fix error when changing existing HSR interface. RHEL-100773 - Upgrade to 2.2.54 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121418 - Upgrade to 2.2.52 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. - Introduce state: ignore for route. - Support PCI address matching in gen_conf. - Support MacSec interface in gen_conf. - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Update to version 22.19.0 - configure.py: use local headers for building native addons when available - spec: fix node binary calls to use versioned binary - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Fix CVE-2026-19534: Update undici to 6.28.1 - Fix CVE-2026-9496: avoid ReDoS in pacote's addGitSha - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Update to version 22.19.0 - configure.py: use local headers for building native addons when available - spec: fix node binary calls to use versioned binary - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Fix CVE-2026-19534: Update undici to 6.28.1 - Fix CVE-2026-9496: avoid ReDoS in pacote's addGitSha - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Update to version 22.19.0 - configure.py: use local headers for building native addons when available - spec: fix node binary calls to use versioned binary - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Fix CVE-2026-19534: Update undici to 6.28.1 - Fix CVE-2026-9496: avoid ReDoS in pacote's addGitSha - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Update to version 22.19.0 - configure.py: use local headers for building native addons when available - spec: fix node binary calls to use versioned binary - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Fix CVE-2026-19534: Update undici to 6.28.1 - Fix CVE-2026-9496: avoid ReDoS in pacote's addGitSha - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Update to version 22.19.0 - configure.py: use local headers for building native addons when available - spec: fix node binary calls to use versioned binary - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Fix CVE-2026-19534: Update undici to 6.28.1 - Fix CVE-2026-9496: avoid ReDoS in pacote's addGitSha - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Bump release for October 2024 mass rebuild: - Setup gating for c10s - Bump release for June 2024 mass rebuild - SPDX conversion - update to version 3.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to version 3.0.1 - Let nodemon work with any Node.js version Resolves: #2230317 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Regenerete sources. - Update to version 3.1.14 - revert of ce0df1a - deps: revert letting nodemon work with any node - Bump release for October 2024 mass rebuild: - Setup gating for c10s - Fix CVE-2026-69152 - brace-expansion - Regenerete sources. - Update to version 3.1.14 - revert of ce0df1a - deps: revert letting nodemon work with any node - Bump release for October 2024 mass rebuild: - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Update to version 22.19.0 - configure.py: use local headers for building native addons when available - spec: fix node binary calls to use versioned binary - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Unit-tests adjustment - disable internet/test-dgram-membership - Add patch to prevent fips usage segfault - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Filter for nodejs22.fmf in gating plan - Update to 22.22.0 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Bump release to get correct RHEL build - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 - sources: changed ICU version syntax - Fix CVE-2026-19534: Update undici to 6.28.1 - Fix CVE-2026-9496: avoid ReDoS in pacote's addGitSha - Update to version 22.23.2 - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (npm/brace-expansion) - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar) - CVE-2026-42338 ip-address HTML escaping fix. - Update to version 22.23.1 - De-bundle c-ares, libuv - we waited for c-ares for about 4 months, so added conditional flag in case it falls behind in future again, same for libuv - Properly handle @group/package deps in nodejs-symlink-deps - Add test case for symlinked dependencies bug fix - added test/symlinked scenario - verifies nodejs.req correctly generates requirements for symlinked deps - added mock 'external' packages to support this test - Correctly determine if a package has bundled dependencies - Move ABI dependency generator to nodejs package - Use %autochangelog macro - Bump release for October 2024 mass rebuild: - Setup gating for c10s - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - test-plan: adjust variables and filter - Update to version 24.6.0 - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to version 24.21.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - test-plan: adjust variables and filter - Update to version 24.6.0 - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to version 24.21.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - test-plan: adjust variables and filter - Update to version 24.6.0 - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to version 24.21.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - test-plan: adjust variables and filter - Update to version 24.6.0 - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to version 24.21.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - test-plan: adjust variables and filter - Update to version 24.6.0 - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to version 24.21.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - test-plan: adjust variables and filter - Update to version 24.6.0 - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Correct dependency version macros - spec: fix node binary calls to use versioned node-24 binary - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - makefile: change package manager to RH one - Update to version 24.11.1 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to 24.13.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Swap definition order for metadata fields - Update to version 24.21.0 - Update to version 24.19.0 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-13149 (brace-expansion) - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar) - Update to version 24.18.0 - De-bundle c-ares and libuv - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - Add RPM macros to configure %_passwd_path and %_group_path - Fixes user/group lookup for packages with non-root file ownership - See: https://github.com/rpm-software-management/rpm/pull/3672 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add nss-policy-check - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement - fix changelog message for 3.101.0-11 - full fix to pss issues - fix pkcs12 defaults - fix pss issues - remove crmf - rebase fixes - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update License to SPDX expression - Update to version 1.1.15 https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG - Fix building with cmocka >= 1.1.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to version 1.1.13 https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update License to SPDX expression - Update to version 1.1.15 https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG - Fix building with cmocka >= 1.1.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to version 1.1.13 https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - ostree: move admindir to /etc/alternatives.admindir - update po/chkconfig.pot - add basic mkosi config - remove not used directory from makefile - ntsysv: fix leaks - leveldb: security_context_t is deprecated - leveldb: fix leak - leveldb: fix leak - leveldb: fix leak - leveldb: fix leak - leveldb: fix leak - chkconfig: fix leak - chkconfig: fix leak - chkconfig: fix memory leak when deleting a service - leveldb: add destructors for service - leveldb: fix memory leak - leveldb.c: fix memory leak - chkconfig: fix leak - leveldb: fix memory leak - alternatives: ensure the current alt. is freed if parsing fails - alternatives: ensure the current group is freed - Translated using Weblate (English (United Kingdom)) - Translated using Weblate (Turkish) - Prepare for bin-sbin merge - tests: fix integration with github actions - alternatives: properly handle chars with const in normalize_path - alternatives: use exit in main instead of return for critical failures - alternatives: fix leak - alternatives: fix leak - alternatives: fix possible overrun - alternatives: fix all the leaks of groups in readConfig - alternatives: fix all the leaks of read line in readConfig - alternatives: fix leak - alternatives: fix memory leak - alternatives: fix memory leak - alternatives: initialize parameters in main to NULL - alternatives: fix memory leak - Translated using Weblate (Korean) - Translated using Weblate (English (United Kingdom)) - Translated using Weblate (Finnish) - Translated using Weblate (Finnish) - Translated using Weblate (Japanese) - Translated using Weblate (Swedish) - Translated using Weblate (Japanese) - Translated using Weblate (Polish) - Translated using Weblate (Korean) - Translated using Weblate (Georgian) - Update translation files - Translated using Weblate (Japanese) - Fix systemd dependency - fix(test): dot't call `basename` with empty string - spec: sort BuildRequires alphabetically - fix(test): remove dangling `rlPhase` fn call - ci: run tests using Packit and Testing Farm - build: update `.pot` file - ci: fix typo in test workflow - test: add support for running using tmt - Translated using Weblate (Czech) - Translated using Weblate (Punjabi) - build(deps): bump actions/upload-artifact from 3 to 4 - build(deps): bump github/codeql-action from 2 to 3 - leveldb: fix systemdActive() - build(deps): bump redhat-plumbers-in-action/differential-shellcheck - Translated using Weblate (Hungarian) - build(deps): bump actions/checkout from 3 to 4 - alternatives: fix possible buffer overrun - Translated using Weblate (Korean) - Translated using Weblate (Chinese (Simplified) (zh_CN)) - ci: fix `NEXT_VERSION` in Makefile - revert: releng: Enable Packit to handle Fedora updates - revert: releng: Convert to rpmautospec - Translated using Weblate (Korean) - Translated using Weblate (English (United Kingdom)) - alternatives: --keep-foreign incorrectly handles non-existent files - alternatives: isLink should return 0 in case of lstat error - Translated using Weblate (Swedish) - Translated using Weblate (Korean) - Translated using Weblate (Georgian) - Translated using Weblate (Finnish) - Translated using Weblate (Ukrainian) - Translated using Weblate (Polish) - Update translation files - Translated using Weblate (German) - doc: update translations - spec: remote changelog - migrate to SPDX license - Translated using Weblate (English (United Kingdom)) - Translated using Weblate (Japanese) - ci: Add locale linter - ci: update workflows - test: fix ShellCheck error[SC2070] - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94) - releng: Packit remove extra job trigger - releng: Enable Packit to handle Fedora updates - releng: Convert to rpmautospec - Fix numa_preferred() returned value - Rebase to v2.0.19 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops Resolves: RHEL-92555 - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120) - Add amdnpu linux firmware folder (RHEL-77950) - Introduce new PMF TA (RHEL-86837) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-85120, RHEL-77950, RHEL-86837 - accel: ivpu: Update firmware for NPU (RHEL-38586) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-38586 - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops Resolves: RHEL-92555 - accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120) - Add amdnpu linux firmware folder (RHEL-77950) - Introduce new PMF TA (RHEL-86837) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-85120, RHEL-77950, RHEL-86837 - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops Resolves: RHEL-92555 - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream () - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-154363) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs Resolves: RHEL-154363 - Update linux-firmware to latest upstream (RHEL-145527) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device Resolves: RHEL-145527 - Update linux-firmware to latest upstream (RHEL-119866) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 Resolves: RHEL-119866 - Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675) - AMDGPU: Update firmware for Strix Halo (RHEL-104078) - AMDGPU: Add firmware for Gorgon Point (RHEL-107606) - Update linux-firmware to latest upstream Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware Resolves: RHEL-117675, RHEL-104078, RHEL-107606 - Update linux-firmware to latest upstream (RHEL-108921) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core Resolves: RHEL-108921 - nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393) - Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947) Changes since the last update are noted on items below, copied from the git changelog of upstream linux-firmware repository. - xe: Add fan_control v203.0.0.0 for BMG - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device Resolves: RHEL-95393, RHEL-100947 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 9.6 - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 9.5 - Update to upstream version 9.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump and rebuild - Update OCaml native arches for OCaml 5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update OCaml native arches for OCaml 5.1 - Remove the Python file and some macros (now in ocaml-rpm-macros) - Add %ocaml_pkg macro for common declarations - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update OCaml native archs for OCaml 5.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11 - simplify spec - Resolves: RHEL-85838 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix build with libxml2-2.12.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Provide a switch to restore pre-CVE-2020-10737 behavior - Always set the home directory permissions according to HOME_MODE - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix build with libxml2-2.12.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Provide a switch to restore pre-CVE-2020-10737 behavior - Always set the home directory permissions according to HOME_MODE - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild without generated Requires - Set JDK version to 1.8 - Bump release for June 2024 mass rebuild - change subpackages licences to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0" - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild without generated Requires - Set JDK version to 1.8 - Bump release for June 2024 mass rebuild - change subpackages licences to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0" - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild without generated Requires - Set JDK version to 1.8 - Bump release for June 2024 mass rebuild - bump release for rebuild with gating.yaml - Move velocity-2 dependencies to codegenerator - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop codegenerator from install - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Migrate to SPDX license: Apache-2.0 Resolves: FREEIPA-9619 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebase to 13.0.10 [RHEL-144577] - Resolves: RHEL-144577 ([ESXi][RHEL10] open-vm-tools version 13.0.10 has been released - please rebase) - Rebase to 13.0.5 [RHEL-118504] - Resolves: RHEL-118504 ([ESXi][RHEL10] open-vm-tools version 13.0.5 has been released - please rebase) - ovt-Handle-new-cloud-init-error-code-and-status.patch [RHEL-99781] - ovt-Address-CVE-2025-41244.patch [RHEL-117382] - Resolves: RHEL-99781 (Cloud-init receives TERM signal from PID 1 in the middle of running user data [rhel-10]) - Resolves: RHEL-117382 ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.2]) - Rebase to 13.0.0 [RHEL-99156] - Resolves: RHEL-99156 ([ESXi][RHEL10] open-vm-tools version 13.0.0 has been released - please rebase) - Rebase to 12.5.0 [RHEL-63092] - Resolves: RHEL-63092 ([ESXi][RHEL10] open-vm-tools version 12.5.0 has been released - please rebase) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 12.4.1 [RHEL-45549] - Resolves: RHEL-45549 ([ESXi][RHEL10] open-vm-tools version 12.4.5 has been released - please rebase) - Bundle gtkmm3.0 stack on RHEL 10 to allow its removal - Update license string to SPDX format - Bump release for June 2024 mass rebuild - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732] - Resolves: RHEL-40732 (Drop unneeded gdk-pixbuf-xlib dependency) - Rebase to 13.0.10 [RHEL-144577] - Resolves: RHEL-144577 ([ESXi][RHEL10] open-vm-tools version 13.0.10 has been released - please rebase) - Rebase to 13.0.5 [RHEL-118504] - Resolves: RHEL-118504 ([ESXi][RHEL10] open-vm-tools version 13.0.5 has been released - please rebase) - ovt-Handle-new-cloud-init-error-code-and-status.patch [RHEL-99781] - ovt-Address-CVE-2025-41244.patch [RHEL-117382] - Resolves: RHEL-99781 (Cloud-init receives TERM signal from PID 1 in the middle of running user data [rhel-10]) - Resolves: RHEL-117382 ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.2]) - Rebase to 13.0.0 [RHEL-99156] - Resolves: RHEL-99156 ([ESXi][RHEL10] open-vm-tools version 13.0.0 has been released - please rebase) - Rebase to 12.5.0 [RHEL-63092] - Resolves: RHEL-63092 ([ESXi][RHEL10] open-vm-tools version 12.5.0 has been released - please rebase) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 12.4.1 [RHEL-45549] - Resolves: RHEL-45549 ([ESXi][RHEL10] open-vm-tools version 12.4.5 has been released - please rebase) - Bundle gtkmm3.0 stack on RHEL 10 to allow its removal - Update license string to SPDX format - Bump release for June 2024 mass rebuild - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732] - Resolves: RHEL-40732 (Drop unneeded gdk-pixbuf-xlib dependency) - Rebase to 13.0.10 [RHEL-144577] - Resolves: RHEL-144577 ([ESXi][RHEL10] open-vm-tools version 13.0.10 has been released - please rebase) - Rebase to 13.0.5 [RHEL-118504] - Resolves: RHEL-118504 ([ESXi][RHEL10] open-vm-tools version 13.0.5 has been released - please rebase) - ovt-Handle-new-cloud-init-error-code-and-status.patch [RHEL-99781] - ovt-Address-CVE-2025-41244.patch [RHEL-117382] - Resolves: RHEL-99781 (Cloud-init receives TERM signal from PID 1 in the middle of running user data [rhel-10]) - Resolves: RHEL-117382 ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.2]) - Rebase to 13.0.0 [RHEL-99156] - Resolves: RHEL-99156 ([ESXi][RHEL10] open-vm-tools version 13.0.0 has been released - please rebase) - Rebase to 12.5.0 [RHEL-63092] - Resolves: RHEL-63092 ([ESXi][RHEL10] open-vm-tools version 12.5.0 has been released - please rebase) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 12.4.1 [RHEL-45549] - Resolves: RHEL-45549 ([ESXi][RHEL10] open-vm-tools version 12.4.5 has been released - please rebase) - Bundle gtkmm3.0 stack on RHEL 10 to allow its removal - Update license string to SPDX format - Bump release for June 2024 mass rebuild - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732] - Resolves: RHEL-40732 (Drop unneeded gdk-pixbuf-xlib dependency) - Re-include openblas.pc - Resolves: RHEL-72679 - Update to 0.3.29 - Resolves: RHEL-82829 - Add riscv64 - Waive annocheck: --skip-optimization - Resolves: RHEL-33513 - Update to 0.3.28 Resolves: BZ#2273704 Resolves: RHEL-54180 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Waive annocheck: --skip-fortify and --skip-lto - Resolves: RHEL-33513 - Bump release for June 2024 mass rebuild - Fix FTBFS on ppc64le and s390x Resolves: BZ#2261415 Resolves: RHEL-24745 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Re-include openblas.pc - Resolves: RHEL-72679 - Update to 0.3.29 - Resolves: RHEL-82829 - Add riscv64 - Waive annocheck: --skip-optimization - Resolves: RHEL-33513 - Update to 0.3.28 Resolves: BZ#2273704 Resolves: RHEL-54180 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Waive annocheck: --skip-fortify and --skip-lto - Resolves: RHEL-33513 - Bump release for June 2024 mass rebuild - Fix FTBFS on ppc64le and s390x Resolves: BZ#2261415 Resolves: RHEL-24745 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Re-include openblas.pc - Resolves: RHEL-72679 - Update to 0.3.29 - Resolves: RHEL-82829 - Add riscv64 - Waive annocheck: --skip-optimization - Resolves: RHEL-33513 - Update to 0.3.28 Resolves: BZ#2273704 Resolves: RHEL-54180 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Waive annocheck: --skip-fortify and --skip-lto - Resolves: RHEL-33513 - Bump release for June 2024 mass rebuild - Fix FTBFS on ppc64le and s390x Resolves: BZ#2261415 Resolves: RHEL-24745 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Re-include openblas.pc - Resolves: RHEL-72679 - Update to 0.3.29 - Resolves: RHEL-82829 - Add riscv64 - Waive annocheck: --skip-optimization - Resolves: RHEL-33513 - Update to 0.3.28 Resolves: BZ#2273704 Resolves: RHEL-54180 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Waive annocheck: --skip-fortify and --skip-lto - Resolves: RHEL-33513 - Bump release for June 2024 mass rebuild - Fix FTBFS on ppc64le and s390x Resolves: BZ#2261415 Resolves: RHEL-24745 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add riscv64 to openblas_arches. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Resync to 20231212 - Resync to 20231003 - SPDX license update - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Resync to 20230509 - Skip pkgconfig files (bz#2212323) - Resync to 20230201 - Drop cl.hpp (CL 1.4 is provided by opencl.h according to upstream) - Rebase to stable version 2.1.14 Resolves: RHEL-75904 - Use systemd-sysusers to create users Resolves: RHEL-4896 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Upstream release 2.1.14RC1 - Fix build with gcc 14 - Resolves: rhbz#2261421 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Port to C99 - Fix fortification issues leading to crash in FreeIPA setup Upstream PR: https://github.com/opendnssec/opendnssec/pull/842 - fix CVE-2026-27622 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - Bump release for June 2024 mass rebuild - fix CVE-2026-34588 - fix CVE-2026-27622 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - Bump release for June 2024 mass rebuild - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - fix CVE-2026-68515 - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2026-59982 - fix CVE-2026-59184 - fix CVE-2026-59189 - fix CVE-2026-59981 - fix CVE-2026-34544 - fix CVE-2026-68515 - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2026-27622 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - Bump release for June 2024 mass rebuild - fix CVE-2026-34588 - fix CVE-2026-27622 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - Bump release for June 2024 mass rebuild - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - fix CVE-2026-68515 - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2026-59982 - fix CVE-2026-59184 - fix CVE-2026-59189 - fix CVE-2026-59981 - fix CVE-2026-34544 - fix CVE-2026-68515 - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix CVE-2025-54874: OOB heap memory write (RHEL-107568) - fix two heap buffer overflows CVE-2024-56826 and CVE-2024-52827 (RHEL-72518,RHEL-72520) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebuild - updated to 2.5.2 (#RHEL-48781) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - BR: liblerc-devel - Rebase to version 2.6.10 - Resolves: RHEL-129935 - Rebase to version 2.6.9 (RHEL-107610) - Fix TLS connection timeout handling (RHEL-68773) - Replace baseos-ci tests with osci (RHEL-71052) - Rebase to version 2.6.8 (RHEL-71052) - Avoid SSL context cleanup during library destruction (RHEL-68424) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable MD2 hash algorithm Resolves: RHEL-61830 - Fix vlvResult patch (RHEL-36474) - Fix libslapi definition and a comment typo - Fix annocheck bind-now issue (RHEL-33514) - Fix vlvResult comment (RHEL-36474) - Bump release for June 2024 mass rebuild - After bumping the epoch, we need to change the subpackage requires to use it - Bump the epoch to support upgrade path from previous versions of RHEL - Bump release for June 2024 mass rebuild - Add support for riscv64 - Update to 5.0.2 - Drop unused BR on infinipath-psm - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 5.0.1 - Disable building docs in RHEL builds - Update to 5.0.0 - Drops 32-bit i686 support - Drops C++ bindings - Add doc sub-package - After bumping the epoch, we need to change the subpackage requires to use it - Bump the epoch to support upgrade path from previous versions of RHEL - Bump release for June 2024 mass rebuild - Add support for riscv64 - Update to 5.0.2 - Drop unused BR on infinipath-psm - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 5.0.1 - Disable building docs in RHEL builds - Update to 5.0.0 - Drops 32-bit i686 support - Drops C++ bindings - Add doc sub-package - After bumping the epoch, we need to change the subpackage requires to use it - Bump the epoch to support upgrade path from previous versions of RHEL - Bump release for June 2024 mass rebuild - Add support for riscv64 - Update to 5.0.2 - Drop unused BR on infinipath-psm - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 5.0.1 - Disable building docs in RHEL builds - Update to 5.0.0 - Drops 32-bit i686 support - Drops C++ bindings - Add doc sub-package - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-133978) - Add the ability to show rule details in output (RHEL-104651) - Upgrade to the latest upstream release (RHEL-88845) - Upgrade to the latest upstream release - Introduce the 'oscap-im' tool - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filehash58 probe on s390x architecture - Update to the latest upstream release (RHEL-53981) - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages - Bump release for June 2024 mass rebuild - Update gating tests - Rebase to the latest upstream version - Use NSS as cryptography library (RHEL-22013) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-161763) - Fix Bash completion (RHEL-145121) - Add ability to list rules and variables in a profile by the "oscap info" command (RHEL-143569) - Upgrade to the latest upstream release (RHEL-133978) - Add the ability to show rule details in output (RHEL-104651) - Upgrade to the latest upstream release (RHEL-88845) - Upgrade to the latest upstream release - Introduce the 'oscap-im' tool - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filehash58 probe on s390x architecture - Update to the latest upstream release (RHEL-53981) - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-133978) - Add the ability to show rule details in output (RHEL-104651) - Upgrade to the latest upstream release (RHEL-88845) - Upgrade to the latest upstream release - Introduce the 'oscap-im' tool - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filehash58 probe on s390x architecture - Update to the latest upstream release (RHEL-53981) - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages - Bump release for June 2024 mass rebuild - Update gating tests - Rebase to the latest upstream version - Use NSS as cryptography library (RHEL-22013) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-161763) - Fix Bash completion (RHEL-145121) - Add ability to list rules and variables in a profile by the "oscap info" command (RHEL-143569) - Upgrade to the latest upstream release (RHEL-133978) - Add the ability to show rule details in output (RHEL-104651) - Upgrade to the latest upstream release (RHEL-88845) - Upgrade to the latest upstream release - Introduce the 'oscap-im' tool - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filehash58 probe on s390x architecture - Update to the latest upstream release (RHEL-53981) - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-133978) - Add the ability to show rule details in output (RHEL-104651) - Upgrade to the latest upstream release (RHEL-88845) - Upgrade to the latest upstream release - Introduce the 'oscap-im' tool - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filehash58 probe on s390x architecture - Update to the latest upstream release (RHEL-53981) - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages - Bump release for June 2024 mass rebuild - Update gating tests - Rebase to the latest upstream version - Use NSS as cryptography library (RHEL-22013) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-161763) - Fix Bash completion (RHEL-145121) - Add ability to list rules and variables in a profile by the "oscap info" command (RHEL-143569) - Upgrade to the latest upstream release (RHEL-133978) - Add the ability to show rule details in output (RHEL-104651) - Upgrade to the latest upstream release (RHEL-88845) - Upgrade to the latest upstream release - Introduce the 'oscap-im' tool - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filehash58 probe on s390x architecture - Update to the latest upstream release (RHEL-53981) - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-133978) - Add the ability to show rule details in output (RHEL-104651) - Upgrade to the latest upstream release (RHEL-88845) - Upgrade to the latest upstream release - Introduce the 'oscap-im' tool - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filehash58 probe on s390x architecture - Update to the latest upstream release (RHEL-53981) - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages - Bump release for June 2024 mass rebuild - Update gating tests - Rebase to the latest upstream version - Use NSS as cryptography library (RHEL-22013) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-161763) - Fix Bash completion (RHEL-145121) - Add ability to list rules and variables in a profile by the "oscap info" command (RHEL-143569) - Upgrade to the latest upstream release (RHEL-133978) - Add the ability to show rule details in output (RHEL-104651) - Upgrade to the latest upstream release (RHEL-88845) - Upgrade to the latest upstream release - Introduce the 'oscap-im' tool - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filehash58 probe on s390x architecture - Update to the latest upstream release (RHEL-53981) - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Unpatch Red Hat help message - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151579 - Support of hybrid MLKEM key exchange methods in FIPS mode Resolves: RHEL-125929 - Adding a mechanism to disable GSSAPIDelegateCredentials in sshd_config Resolves: RHEL-5281 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128399 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128388 - Implement mlkem768nistp256-sha256 and mlkem1024nistp384-sha384 KEX methods Resolves: RHEL-70824 - Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-118406 - Canonicalize username when matching a user Resolves: RHEL-101440 - Unpatch Red Hat help message - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193170 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193016 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186435 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185826 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185852 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151579 - Support of hybrid MLKEM key exchange methods in FIPS mode Resolves: RHEL-125929 - Adding a mechanism to disable GSSAPIDelegateCredentials in sshd_config Resolves: RHEL-5281 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128399 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128388 - Unpatch Red Hat help message - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245413 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245423 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245418 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236314 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236288 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193170 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193016 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186435 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185826 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185852 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151579 - Support of hybrid MLKEM key exchange methods in FIPS mode Resolves: RHEL-125929 - Unpatch Red Hat help message - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-258463 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245413 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245423 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245418 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236314 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236288 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193170 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193016 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186435 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185826 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185852 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151579 - Unpatch Red Hat help message - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276225 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-276232 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-276227 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-258463 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245413 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245423 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245418 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236314 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236288 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193170 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193016 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186435 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185826 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185852 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812 - Unpatch Red Hat help message - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151579 - Support of hybrid MLKEM key exchange methods in FIPS mode Resolves: RHEL-125929 - Adding a mechanism to disable GSSAPIDelegateCredentials in sshd_config Resolves: RHEL-5281 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128399 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128388 - Implement mlkem768nistp256-sha256 and mlkem1024nistp384-sha384 KEX methods Resolves: RHEL-70824 - Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-118406 - Canonicalize username when matching a user Resolves: RHEL-101440 - Unpatch Red Hat help message - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193170 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193016 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186435 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185826 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185852 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151579 - Support of hybrid MLKEM key exchange methods in FIPS mode Resolves: RHEL-125929 - Adding a mechanism to disable GSSAPIDelegateCredentials in sshd_config Resolves: RHEL-5281 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128399 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128388 - Unpatch Red Hat help message - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245413 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245423 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245418 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236314 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236288 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193170 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193016 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186435 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185826 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185852 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151579 - Support of hybrid MLKEM key exchange methods in FIPS mode Resolves: RHEL-125929 - Unpatch Red Hat help message - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-258463 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245413 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245423 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245418 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236314 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236288 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193170 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193016 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186435 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185826 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185852 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151579 - Unpatch Red Hat help message - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276225 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-276232 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-276227 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-258463 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245413 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245423 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245418 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236314 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236288 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193170 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193016 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186435 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185826 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185852 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812 - Redefine sslarch for x86_64_v2 arch - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Fix globally disabled LTO Related: RHEL-111634 - Initialize reserved and unused memory in aes-s390x.pl Resolves: RHEL-107479 - Make openssl speed test signatures without errors Resolves: RHEL-95182 - Build tests in check and without LTO Resolves: RHEL-111634 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-101548 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-105010 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80811 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-90350 Resolves: RHEL-95613 Resolves: RHEL-97796 Resolves: RHEL-99353 Resolves: RHEL-100168 - rebuilt Related: RHEL-80811 - Redefine sslarch for x86_64_v2 arch - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Fix globally disabled LTO Related: RHEL-111634 - Initialize reserved and unused memory in aes-s390x.pl Resolves: RHEL-107479 - Make openssl speed test signatures without errors Resolves: RHEL-95182 - Build tests in check and without LTO Resolves: RHEL-111634 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-101548 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-105010 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80811 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-90350 Resolves: RHEL-95613 Resolves: RHEL-97796 Resolves: RHEL-99353 Resolves: RHEL-100168 - Redefine sslarch for x86_64_v2 arch Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697 - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Fix globally disabled LTO Related: RHEL-111634 - Initialize reserved and unused memory in aes-s390x.pl Resolves: RHEL-107479 - Make openssl speed test signatures without errors Resolves: RHEL-95182 - Build tests in check and without LTO Resolves: RHEL-111634 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-101548 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-105010 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80811 - Redefine sslarch for x86_64_v2 arch - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-169991 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697 - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Fix globally disabled LTO Related: RHEL-111634 - Initialize reserved and unused memory in aes-s390x.pl Resolves: RHEL-107479 - Make openssl speed test signatures without errors Resolves: RHEL-95182 - Build tests in check and without LTO Resolves: RHEL-111634 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-101548 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-105010 - Redefine sslarch for x86_64_v2 arch - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210864 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-169991 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697 - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Fix globally disabled LTO Related: RHEL-111634 - Initialize reserved and unused memory in aes-s390x.pl Resolves: RHEL-107479 - Make openssl speed test signatures without errors Resolves: RHEL-95182 - Build tests in check and without LTO Resolves: RHEL-111634 - Redefine sslarch for x86_64_v2 arch - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445 Resolves: RHEL-246449 Resolves: RHEL-246453 - Backport the "HollowByte" hardening patch Resolves: RHEL-212362 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210864 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-169991 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697 - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Redefine sslarch for x86_64_v2 arch - Fixes DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) Resolves: RHEL-264466 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445 Resolves: RHEL-246449 Resolves: RHEL-246453 - Backport the "HollowByte" hardening patch Resolves: RHEL-212362 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210864 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-169991 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697 - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Redefine sslarch for x86_64_v2 arch - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Fix globally disabled LTO Related: RHEL-111634 - Initialize reserved and unused memory in aes-s390x.pl Resolves: RHEL-107479 - Make openssl speed test signatures without errors Resolves: RHEL-95182 - Build tests in check and without LTO Resolves: RHEL-111634 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-101548 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-105010 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80811 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-90350 Resolves: RHEL-95613 Resolves: RHEL-97796 Resolves: RHEL-99353 Resolves: RHEL-100168 - rebuilt Related: RHEL-80811 - Redefine sslarch for x86_64_v2 arch - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Fix globally disabled LTO Related: RHEL-111634 - Initialize reserved and unused memory in aes-s390x.pl Resolves: RHEL-107479 - Make openssl speed test signatures without errors Resolves: RHEL-95182 - Build tests in check and without LTO Resolves: RHEL-111634 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-101548 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-105010 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80811 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-90350 Resolves: RHEL-95613 Resolves: RHEL-97796 Resolves: RHEL-99353 Resolves: RHEL-100168 - Redefine sslarch for x86_64_v2 arch Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697 - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Fix globally disabled LTO Related: RHEL-111634 - Initialize reserved and unused memory in aes-s390x.pl Resolves: RHEL-107479 - Make openssl speed test signatures without errors Resolves: RHEL-95182 - Build tests in check and without LTO Resolves: RHEL-111634 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-101548 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-105010 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80811 - Redefine sslarch for x86_64_v2 arch - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-169991 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697 - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Fix globally disabled LTO Related: RHEL-111634 - Initialize reserved and unused memory in aes-s390x.pl Resolves: RHEL-107479 - Make openssl speed test signatures without errors Resolves: RHEL-95182 - Build tests in check and without LTO Resolves: RHEL-111634 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-101548 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-105010 - Redefine sslarch for x86_64_v2 arch - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210864 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-169991 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697 - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Fix globally disabled LTO Related: RHEL-111634 - Initialize reserved and unused memory in aes-s390x.pl Resolves: RHEL-107479 - Make openssl speed test signatures without errors Resolves: RHEL-95182 - Build tests in check and without LTO Resolves: RHEL-111634 - Redefine sslarch for x86_64_v2 arch - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445 Resolves: RHEL-246449 Resolves: RHEL-246453 - Backport the "HollowByte" hardening patch Resolves: RHEL-212362 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210864 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-169991 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697 - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Fix CVE-2025-9230 Resolves: RHEL-115883 - Redefine sslarch for x86_64_v2 arch - Fixes DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) Resolves: RHEL-264466 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445 Resolves: RHEL-246449 Resolves: RHEL-246453 - Backport the "HollowByte" hardening patch Resolves: RHEL-212362 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210864 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-169991 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697 - Fix CVE-2026-28390 Resolves: RHEL-165705 - Fix CVE-2026-31790 Resolves: RHEL-161574 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054 - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3 - Addresses: CVE-2026-25679, CVE-2026-33186, CVE-2026-34986, CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810 - Update to v0.144.0 - Resolves: RHEL-148515 - Addresses: CVE-2025-61726, CVE-2025-68121 - Update Go to v1.25.5 - Resolves: RHEL-140521 - Addresses: CVE-2025-61729 - Update Expr to v1.17.7 - Addresses CVE-2025-68156 - Resolves: RHEL-136443 - Version bump to 0.135.0 Add systemd-journal group to Requires Bump go- tpm-keyfiles Resolves: RHEL-119363 - Go version update to v1.24.4 - Collector version update - Go version update to v1.23.9 - Update addresses CVE-2025-22871 Resolves: RHEL-90009 - Bump revision - Update golang-jwt v5.2.1 to v5.2.2 - Update addresses CVE-2025-30204 Resolves: RHEL-85035 - Bump revision - Update go-jose v4.0.2 to v4.0.5 - Update testify v1.9.0 to v1.10.0 - Update addresses CVE-2025-27144 Resolves: RHEL-84160 - Bump revision - Update expr v1.16.9 to v1.17.0 - Update addresses CVE-2025-29786 Resolves: RHEL-84153 - Update to v0.152.1 - Addresses CVE-2026-39821, CVE-2026-42154, CVE-2026-33811, CVE-2026-42151, CVE-2026-27145, CVE-2026-25681, CVE-2026-27136 - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3 - Addresses: CVE-2026-25679, CVE-2026-33186, CVE-2026-34986, CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810 - Update to v0.144.0 - Resolves: RHEL-148515 - Addresses: CVE-2025-61726, CVE-2025-68121 - Update Go to v1.25.5 - Resolves: RHEL-140521 - Addresses: CVE-2025-61729 - Update Expr to v1.17.7 - Addresses CVE-2025-68156 - Resolves: RHEL-136443 - Version bump to 0.135.0 Add systemd-journal group to Requires Bump go- tpm-keyfiles Resolves: RHEL-119363 - Go version update to v1.24.4 - Collector version update - Go version update to v1.23.9 - Update addresses CVE-2025-22871 Resolves: RHEL-90009 - Bump revision - Update golang-jwt v5.2.1 to v5.2.2 - Update addresses CVE-2025-30204 Resolves: RHEL-85035 - Bump revision - Update go-jose v4.0.2 to v4.0.5 - Update testify v1.9.0 to v1.10.0 - Update addresses CVE-2025-27144 Resolves: RHEL-84160 - Rebuild with updated golang and otel - Update addresses CVE-2026-39820, CVE-2026-42499, CVE-2026-42504, CVE-2026-56860, CVE-2026-56859, CVE-2026-41178, CVE-2026-56862, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853 - Resolves: RHEL-251695, RHEL-251812, RHEL-251064, RHEL-241834, RHEL-241965, RHEL-239499, RHEL-242244, RHEL-241289, RHEL-241636, RHEL-241166 - Update to v0.152.1 - Addresses CVE-2026-39821, CVE-2026-42154, CVE-2026-33811, CVE-2026-42151, CVE-2026-27145, CVE-2026-25681, CVE-2026-27136 - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3 - Addresses: CVE-2026-25679, CVE-2026-33186, CVE-2026-34986, CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810 - Update to v0.144.0 - Resolves: RHEL-148515 - Addresses: CVE-2025-61726, CVE-2025-68121 - Update Go to v1.25.5 - Resolves: RHEL-140521 - Addresses: CVE-2025-61729 - Update Expr to v1.17.7 - Addresses CVE-2025-68156 - Resolves: RHEL-136443 - Version bump to 0.135.0 Add systemd-journal group to Requires Bump go- tpm-keyfiles Resolves: RHEL-119363 - Go version update to v1.24.4 - Collector version update - Go version update to v1.23.9 - Update addresses CVE-2025-22871 Resolves: RHEL-90009 - Bump revision - Update golang-jwt v5.2.1 to v5.2.2 - Update addresses CVE-2025-30204 Resolves: RHEL-85035 - Update to v0.158.0 - Addresses CVE-2026-84445 - Resolves: RHEL-262067 - Rebuild with updated golang and otel - Update addresses CVE-2026-39820, CVE-2026-42499, CVE-2026-42504, CVE-2026-56860, CVE-2026-56859, CVE-2026-41178, CVE-2026-56862, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853 - Resolves: RHEL-251695, RHEL-251812, RHEL-251064, RHEL-241834, RHEL-241965, RHEL-239499, RHEL-242244, RHEL-241289, RHEL-241636, RHEL-241166 - Update to v0.152.1 - Addresses CVE-2026-39821, CVE-2026-42154, CVE-2026-33811, CVE-2026-42151, CVE-2026-27145, CVE-2026-25681, CVE-2026-27136 - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3 - Addresses: CVE-2026-25679, CVE-2026-33186, CVE-2026-34986, CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810 - Update to v0.144.0 - Resolves: RHEL-148515 - Addresses: CVE-2025-61726, CVE-2025-68121 - Update Go to v1.25.5 - Resolves: RHEL-140521 - Addresses: CVE-2025-61729 - Update Expr to v1.17.7 - Addresses CVE-2025-68156 - Resolves: RHEL-136443 - Version bump to 0.135.0 Add systemd-journal group to Requires Bump go- tpm-keyfiles Resolves: RHEL-119363 - Go version update to v1.24.4 - Collector version update - Go version update to v1.23.9 - Update addresses CVE-2025-22871 Resolves: RHEL-90009 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Update to upstream version 1.3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Build with module-info - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Modify RPM verification of ssleay.cnf Related: RHEL-113443 - Fix bogus 'sscg' arguments Related: RHEL-113443 - Update to openwsman-2.8.1 Resolves: RHEL-99191 - Update OpenSSL certificates set up Resolves: RHEL-113443 - Support added for post-quantum cryptography Resolves: RHEL-93091 - Remove deprecated path from systemd service file Resolves: RHEL-101169 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update license tags in subpackages to SPDX format - Modify RPM verification of ssleay.cnf Related: RHEL-113443 - Fix bogus 'sscg' arguments Related: RHEL-113443 - Update to openwsman-2.8.1 Resolves: RHEL-99191 - Update OpenSSL certificates set up Resolves: RHEL-113443 - Support added for post-quantum cryptography Resolves: RHEL-93091 - Remove deprecated path from systemd service file Resolves: RHEL-101169 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update license tags in subpackages to SPDX format - Modify RPM verification of ssleay.cnf Related: RHEL-113443 - Fix bogus 'sscg' arguments Related: RHEL-113443 - Update to openwsman-2.8.1 Resolves: RHEL-99191 - Update OpenSSL certificates set up Resolves: RHEL-113443 - Support added for post-quantum cryptography Resolves: RHEL-93091 - Remove deprecated path from systemd service file Resolves: RHEL-101169 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update license tags in subpackages to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Make mingw subpackages noarch - Update to upstream version 1.4 - Add mingw subpackages - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix build in all arches, copied from Debian - Run autoreconf to make sure that autotools are updated - Clean up some trailing white spaces - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Make mingw subpackages noarch - Update to upstream version 1.4 - Add mingw subpackages - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix build in all arches, copied from Debian - Run autoreconf to make sure that autotools are updated - Clean up some trailing white spaces - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.4.39 - Add patch for div255w fix on ppc64le - Resolves: RHEL-50713 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Move orc-test to main package - Update to 0.4.38 - Version the library to catch bumps - Cleanup spec, use license var - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.4.33 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.4.39 - Add patch for div255w fix on ppc64le - Resolves: RHEL-50713 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Move orc-test to main package - Update to 0.4.38 - Version the library to catch bumps - Cleanup spec, use license var - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.4.33 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.4.39 - Add patch for div255w fix on ppc64le - Resolves: RHEL-50713 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Move orc-test to main package - Update to 0.4.38 - Version the library to catch bumps - Cleanup spec, use license var - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.4.33 - Update to Orca 48.0 so we have the support for the a11y keyboard monitor Resolves: RHEL-83399 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to Orca 46.2 - Bump release for June 2024 mass rebuild - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package - Update to 46.1 - Update to 46.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 46.alpha - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Bump release for package rebuild - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Add AlmaLinux and AlmaLinux Kitten x86_64_v2 support - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Add AlmaLinux and AlmaLinux Kitten x86_64_v2 support - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Add AlmaLinux and AlmaLinux Kitten x86_64_v2 support - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - go.mod: bump indirect golang.org/x/net dependency to v0.56.0 (CVE-2026-25681, CVE-2026-27136, CVE-2026-42502) - go.mod: update github.com/labstack/echo/v4 to v4.15.3 (CVE-2026-55677) - go.mod: update go.opentelemetry.io/otel to v1.44.0 (CVE-2026-41178) - Patches taken from the upstream rhel-9.8_10.2 branch - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Add AlmaLinux and AlmaLinux Kitten x86_64_v2 support - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Add AlmaLinux and AlmaLinux Kitten x86_64_v2 support - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Add AlmaLinux and AlmaLinux Kitten x86_64_v2 support - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - go.mod: bump indirect golang.org/x/net dependency to v0.56.0 (CVE-2026-25681, CVE-2026-27136, CVE-2026-42502) - go.mod: update github.com/labstack/echo/v4 to v4.15.3 (CVE-2026-55677) - go.mod: update go.opentelemetry.io/otel to v1.44.0 (CVE-2026-41178) - Patches taken from the upstream rhel-9.8_10.2 branch - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Add AlmaLinux and AlmaLinux Kitten x86_64_v2 support - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Add AlmaLinux and AlmaLinux Kitten x86_64_v2 support - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Add AlmaLinux and AlmaLinux Kitten x86_64_v2 support - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - go.mod: bump indirect golang.org/x/net dependency to v0.56.0 (CVE-2026-25681, CVE-2026-27136, CVE-2026-42502) - go.mod: update github.com/labstack/echo/v4 to v4.15.3 (CVE-2026-55677) - go.mod: update go.opentelemetry.io/otel to v1.44.0 (CVE-2026-41178) - Patches taken from the upstream rhel-9.8_10.2 branch - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Bump release for package rebuild - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Bump release for package rebuild - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Bump release for package rebuild - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Bump release for package rebuild - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Bump release for package rebuild - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Bump release for package rebuild - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Bump release for package rebuild - New upstream release - New upstream release - New upstream release - Add rhel-10.2 and rhel-9.8 prerelease - Update to v20250606 - Update to v20250124 - Bump release for October 2024 mass rebuild: - Add rhel 10.0 and rhel-10-unknown - Add gating.yaml via API - Update to v20240701 - Bump release for June 2024 mass rebuild - Release 2025.7 - Release v2025.6 - Remove unused patches - Cherry pick https://github.com/ostreedev/ostree/pull/3516 - Release v2025.5 - Backport https://github.com/ostreedev/ostree/pull/3493 - Backport https://github.com/ostreedev/ostree/pull/3487 - Release 2025.4 - Release 2025.3 - Release 2025.2 - Release 2025.7 - Release v2025.6 - Remove unused patches - Cherry pick https://github.com/ostreedev/ostree/pull/3516 - Release v2025.5 - Backport https://github.com/ostreedev/ostree/pull/3493 - Backport https://github.com/ostreedev/ostree/pull/3487 - Release 2025.4 - Release 2025.3 - Release 2025.2 - Release 2025.7 - Release v2025.6 - Remove unused patches - Cherry pick https://github.com/ostreedev/ostree/pull/3516 - Release v2025.5 - Backport https://github.com/ostreedev/ostree/pull/3493 - Backport https://github.com/ostreedev/ostree/pull/3487 - Release 2025.4 - Release 2025.3 - Release 2025.2 - Rebase to 0.26.2 - Rebase to 0.26.1 - Rebase to 0.25.10 - Rebase to 0.25.9 - fix typo in ci.fmf - Bump release for October 2024 mass rebuild: - Fix regression in trust where file creation fails for long cert labels - Fix gating.yaml - add gating RHEL-10 - Add gating.yaml - Rebase to 0.26.4 - Rebase to 0.26.2 - Rebase to 0.26.1 - Rebase to 0.25.10 - Rebase to 0.25.9 - fix typo in ci.fmf - Bump release for October 2024 mass rebuild: - Fix regression in trust where file creation fails for long cert labels - Fix gating.yaml - add gating RHEL-10 - Rebase to 0.26.2 - Rebase to 0.26.1 - Rebase to 0.25.10 - Rebase to 0.25.9 - fix typo in ci.fmf - Bump release for October 2024 mass rebuild: - Fix regression in trust where file creation fails for long cert labels - Fix gating.yaml - add gating RHEL-10 - Add gating.yaml - Rebase to 0.26.4 - Rebase to 0.26.2 - Rebase to 0.26.1 - Rebase to 0.25.10 - Rebase to 0.25.9 - fix typo in ci.fmf - Bump release for October 2024 mass rebuild: - Fix regression in trust where file creation fails for long cert labels - Fix gating.yaml - add gating RHEL-10 - Fix a race condition between daemons when erasing transient attrs - Resolves: RHEL-23082 - Fix promoting instances of a cloned resource - Handle large timeouts correctly in crm_resource --wait - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-120932 - Resolves: RHEL-86148 - Resolves: RHEL-114895 - CTS launches Corosync using systemd if available. - Resolves: RHEL-110075 - Do not retry on ECONNREFUSED in command line tools. - Resolves: RHEL-106594 - Rebase on upstream 3.0.1-rc1 - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Split large IPC messages into multiple smaller ones - Related: RHEL-86085 - Resolves: RHEL-71181 - Resolves: RHEL-86146 - Resolves: RHEL-86144 - Add riscv64 into ExclusiveArch (thanks, Zhengyu He) - Rebase on upstream 3.0.0 final release - Raise minimum GnuTLS dependency to 3.4.6 - Move logrotate script back to pacemaker-cli package - Clear warnings and errors when resetting scheduler object - Resolves: RHEL-61383 - Rebase on upstream 3.0.0-rc3 - Log warnings if XSL transforms cannot preserve previous behavior - Ensure XSL transforms do not invalidate ACLs - Remove build dependency on inkscape - Resolves: RHEL-62096 - Resolves: RHEL-62722 - Rebase on upstream 3.0.0-rc2 - Support X.509 certificates for Pacemaker Remote connections and remote CIB administration - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1) - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1) - Ensure ACLs remain valid after CIB upgrades (regression introduced in 3.0.0-rc1) - Related: RHEL-61383 - Resolves: RHEL-7600 - Rebase on upstream 3.0.0-rc1 - Default globally-unique to true when clone-node-max > 1 - Fix regression in crm_resource master resource handling - Related: RHEL-61383 - Resolves: RHEL-56675 - Resolves: RHEL-60534 - Fix CVE-2026-10649: integer overflows and missing bounds checks in the remote message code (backport of upstream ClusterLabs/pacemaker PR #4129) - Fix a race condition between daemons when erasing transient attrs - Resolves: RHEL-23082 - Fix promoting instances of a cloned resource - Handle large timeouts correctly in crm_resource --wait - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-120932 - Resolves: RHEL-86148 - Resolves: RHEL-114895 - CTS launches Corosync using systemd if available. - Resolves: RHEL-110075 - Do not retry on ECONNREFUSED in command line tools. - Resolves: RHEL-106594 - Rebase on upstream 3.0.1-rc1 - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Split large IPC messages into multiple smaller ones - Related: RHEL-86085 - Resolves: RHEL-71181 - Resolves: RHEL-86146 - Resolves: RHEL-86144 - Add riscv64 into ExclusiveArch (thanks, Zhengyu He) - Rebase on upstream 3.0.0 final release - Raise minimum GnuTLS dependency to 3.4.6 - Move logrotate script back to pacemaker-cli package - Clear warnings and errors when resetting scheduler object - Resolves: RHEL-61383 - Rebase on upstream 3.0.0-rc3 - Log warnings if XSL transforms cannot preserve previous behavior - Ensure XSL transforms do not invalidate ACLs - Remove build dependency on inkscape - Resolves: RHEL-62096 - Resolves: RHEL-62722 - Rebase on upstream 3.0.0-rc2 - Support X.509 certificates for Pacemaker Remote connections and remote CIB administration - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1) - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1) - Ensure ACLs remain valid after CIB upgrades (regression introduced in 3.0.0-rc1) - Related: RHEL-61383 - Resolves: RHEL-7600 - Fix a race condition between daemons when erasing transient attrs - Resolves: RHEL-23082 - Fix promoting instances of a cloned resource - Handle large timeouts correctly in crm_resource --wait - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-120932 - Resolves: RHEL-86148 - Resolves: RHEL-114895 - CTS launches Corosync using systemd if available. - Resolves: RHEL-110075 - Do not retry on ECONNREFUSED in command line tools. - Resolves: RHEL-106594 - Rebase on upstream 3.0.1-rc1 - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Split large IPC messages into multiple smaller ones - Related: RHEL-86085 - Resolves: RHEL-71181 - Resolves: RHEL-86146 - Resolves: RHEL-86144 - Add riscv64 into ExclusiveArch (thanks, Zhengyu He) - Rebase on upstream 3.0.0 final release - Raise minimum GnuTLS dependency to 3.4.6 - Move logrotate script back to pacemaker-cli package - Clear warnings and errors when resetting scheduler object - Resolves: RHEL-61383 - Rebase on upstream 3.0.0-rc3 - Log warnings if XSL transforms cannot preserve previous behavior - Ensure XSL transforms do not invalidate ACLs - Remove build dependency on inkscape - Resolves: RHEL-62096 - Resolves: RHEL-62722 - Rebase on upstream 3.0.0-rc2 - Support X.509 certificates for Pacemaker Remote connections and remote CIB administration - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1) - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1) - Ensure ACLs remain valid after CIB upgrades (regression introduced in 3.0.0-rc1) - Related: RHEL-61383 - Resolves: RHEL-7600 - Rebase on upstream 3.0.0-rc1 - Default globally-unique to true when clone-node-max > 1 - Fix regression in crm_resource master resource handling - Related: RHEL-61383 - Resolves: RHEL-56675 - Resolves: RHEL-60534 - Fix CVE-2026-10649: integer overflows and missing bounds checks in the remote message code (backport of upstream ClusterLabs/pacemaker PR #4129) - Fix a race condition between daemons when erasing transient attrs - Resolves: RHEL-23082 - Fix promoting instances of a cloned resource - Handle large timeouts correctly in crm_resource --wait - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-120932 - Resolves: RHEL-86148 - Resolves: RHEL-114895 - CTS launches Corosync using systemd if available. - Resolves: RHEL-110075 - Do not retry on ECONNREFUSED in command line tools. - Resolves: RHEL-106594 - Rebase on upstream 3.0.1-rc1 - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Split large IPC messages into multiple smaller ones - Related: RHEL-86085 - Resolves: RHEL-71181 - Resolves: RHEL-86146 - Resolves: RHEL-86144 - Add riscv64 into ExclusiveArch (thanks, Zhengyu He) - Rebase on upstream 3.0.0 final release - Raise minimum GnuTLS dependency to 3.4.6 - Move logrotate script back to pacemaker-cli package - Clear warnings and errors when resetting scheduler object - Resolves: RHEL-61383 - Rebase on upstream 3.0.0-rc3 - Log warnings if XSL transforms cannot preserve previous behavior - Ensure XSL transforms do not invalidate ACLs - Remove build dependency on inkscape - Resolves: RHEL-62096 - Resolves: RHEL-62722 - Rebase on upstream 3.0.0-rc2 - Support X.509 certificates for Pacemaker Remote connections and remote CIB administration - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1) - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1) - Ensure ACLs remain valid after CIB upgrades (regression introduced in 3.0.0-rc1) - Related: RHEL-61383 - Resolves: RHEL-7600 - Fix a race condition between daemons when erasing transient attrs - Resolves: RHEL-23082 - Fix promoting instances of a cloned resource - Handle large timeouts correctly in crm_resource --wait - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-120932 - Resolves: RHEL-86148 - Resolves: RHEL-114895 - CTS launches Corosync using systemd if available. - Resolves: RHEL-110075 - Do not retry on ECONNREFUSED in command line tools. - Resolves: RHEL-106594 - Rebase on upstream 3.0.1-rc1 - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Split large IPC messages into multiple smaller ones - Related: RHEL-86085 - Resolves: RHEL-71181 - Resolves: RHEL-86146 - Resolves: RHEL-86144 - Add riscv64 into ExclusiveArch (thanks, Zhengyu He) - Rebase on upstream 3.0.0 final release - Raise minimum GnuTLS dependency to 3.4.6 - Move logrotate script back to pacemaker-cli package - Clear warnings and errors when resetting scheduler object - Resolves: RHEL-61383 - Rebase on upstream 3.0.0-rc3 - Log warnings if XSL transforms cannot preserve previous behavior - Ensure XSL transforms do not invalidate ACLs - Remove build dependency on inkscape - Resolves: RHEL-62096 - Resolves: RHEL-62722 - Rebase on upstream 3.0.0-rc2 - Support X.509 certificates for Pacemaker Remote connections and remote CIB administration - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1) - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1) - Ensure ACLs remain valid after CIB upgrades (regression introduced in 3.0.0-rc1) - Related: RHEL-61383 - Resolves: RHEL-7600 - Rebase on upstream 3.0.0-rc1 - Default globally-unique to true when clone-node-max > 1 - Fix regression in crm_resource master resource handling - Related: RHEL-61383 - Resolves: RHEL-56675 - Resolves: RHEL-60534 - Fix CVE-2026-10649: integer overflows and missing bounds checks in the remote message code (backport of upstream ClusterLabs/pacemaker PR #4129) - Fix a race condition between daemons when erasing transient attrs - Resolves: RHEL-23082 - Fix promoting instances of a cloned resource - Handle large timeouts correctly in crm_resource --wait - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-120932 - Resolves: RHEL-86148 - Resolves: RHEL-114895 - CTS launches Corosync using systemd if available. - Resolves: RHEL-110075 - Do not retry on ECONNREFUSED in command line tools. - Resolves: RHEL-106594 - Rebase on upstream 3.0.1-rc1 - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Split large IPC messages into multiple smaller ones - Related: RHEL-86085 - Resolves: RHEL-71181 - Resolves: RHEL-86146 - Resolves: RHEL-86144 - Add riscv64 into ExclusiveArch (thanks, Zhengyu He) - Rebase on upstream 3.0.0 final release - Raise minimum GnuTLS dependency to 3.4.6 - Move logrotate script back to pacemaker-cli package - Clear warnings and errors when resetting scheduler object - Resolves: RHEL-61383 - Rebase on upstream 3.0.0-rc3 - Log warnings if XSL transforms cannot preserve previous behavior - Ensure XSL transforms do not invalidate ACLs - Remove build dependency on inkscape - Resolves: RHEL-62096 - Resolves: RHEL-62722 - Rebase on upstream 3.0.0-rc2 - Support X.509 certificates for Pacemaker Remote connections and remote CIB administration - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1) - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1) - Ensure ACLs remain valid after CIB upgrades (regression introduced in 3.0.0-rc1) - Related: RHEL-61383 - Resolves: RHEL-7600 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Make sure redhat-package-notes spec is skipped if _package_note_flags is undefined (rbhz#2184553) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - increase priority of paktype-naskh-basic-fonts for urdu - Drop unnecessary BuildRequires: on make and fontforge - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert to new fonts packaging guidelines and SPDX license - Update the fonts package - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging - rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - pam_faillock: skip clearing user's failed attempt. Resolves: RHEL-130871 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-101174 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66241 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-65223 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - spec: Use Requires(meta): authselect. Resolves: RHEL-56703 - Bump release for June 2024 mass rebuild - Fix static analyzer detected issues. Resolves: RHEL-36475 - pam_env: fixes for NULL environment variables - Rebase to release 1.6.1 - Disable nis support - pam_unix: do not warn if password aging is disabled (#2263689) - pam_userdb: fix password comparison timing leak. Resolves: CVE-2026-54411 and RHEL-191704 - pam_faillock: skip clearing user's failed attempt. Resolves: RHEL-130871 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-101174 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66241 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-65223 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - spec: Use Requires(meta): authselect. Resolves: RHEL-56703 - resolves: RHEL-146310 - Enable debug logs in cifs.upcall - resolves: RHEL-131409 - fix regression with cifscreds(1) - resolves: RHEL-82681 - Update to version 7.2 - Bump release for October 2024 mass rebuild: - resolves: RHEL-61731 - Update to version 7.1 - Bump release for June 2024 mass rebuild - resolves: RHEL-192935 - fix krb5 mount regression - Update to version 7.6 - resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego - resolves: RHEL-146310 - Enable debug logs in cifs.upcall - resolves: RHEL-131409 - fix regression with cifscreds(1) - resolves: RHEL-82681 - Update to version 7.2 - Bump release for October 2024 mass rebuild: - resolves: RHEL-61731 - Update to version 7.1 - resolves: RHEL-247581 - fix krb5 regression with --trust-dns - resolves: RHEL-192935 - fix krb5 mount regression - Update to version 7.6 - resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego - resolves: RHEL-146310 - Enable debug logs in cifs.upcall - resolves: RHEL-131409 - fix regression with cifscreds(1) - resolves: RHEL-82681 - Update to version 7.2 - Bump release for October 2024 mass rebuild: - resolves: RHEL-61731 - Update to version 7.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 1.54.0 - Drop the pango-tests sub package - Update to 1.52.2 - Update to 1.51.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.51.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.50.14 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 1.54.0 - Drop the pango-tests sub package - Update to 1.52.2 - Update to 1.51.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.51.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.50.14 - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Update to 2.50.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Show radio button for single cert - Implement AccessibleText for PpsViewPage - Rebase Papers to 48.7 - Fix signing when too small rectangle is selected - Fix crash on repeated signing - Launch target file instead of openning the same file again - Fix showing of help - Fix fast navigation - Check value of "sidebar-page" key - Update Papers to current git snapshot - Show radio button for single cert - Implement AccessibleText for PpsViewPage - Rebase Papers to 48.7 - Fix signing when too small rectangle is selected - Fix crash on repeated signing - Launch target file instead of openning the same file again - Fix showing of help - Fix fast navigation - Check value of "sidebar-page" key - Update Papers to current git snapshot - Show radio button for single cert - Implement AccessibleText for PpsViewPage - Rebase Papers to 48.7 - Fix signing when too small rectangle is selected - Fix crash on repeated signing - Launch target file instead of openning the same file again - Fix showing of help - Fix fast navigation - Check value of "sidebar-page" key - Update Papers to current git snapshot - Show radio button for single cert - Implement AccessibleText for PpsViewPage - Rebase Papers to 48.7 - Fix signing when too small rectangle is selected - Fix crash on repeated signing - Launch target file instead of openning the same file again - Fix showing of help - Fix fast navigation - Check value of "sidebar-page" key - Update Papers to current git snapshot - Show radio button for single cert - Implement AccessibleText for PpsViewPage - Rebase Papers to 48.7 - Fix signing when too small rectangle is selected - Fix crash on repeated signing - Launch target file instead of openning the same file again - Fix showing of help - Fix fast navigation - Check value of "sidebar-page" key - Update Papers to current git snapshot - Rebase to papi-7.2.0. - Resolves: RHEL-121674 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Ensure sde library built with proper flags. (RHEL-33515) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to official papi-7.1.0. - Fix i686 rawhide FTBFS. (rhbz#2254963) - Backport upstream patch, add new patch for autoconf C compatibility - Rebase to papi-7.2.0. - Resolves: RHEL-121674 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Ensure sde library built with proper flags. (RHEL-33515) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to official papi-7.1.0. - Fix i686 rawhide FTBFS. (rhbz#2254963) - Backport upstream patch, add new patch for autoconf C compatibility - Rebase to papi-7.2.0. - Resolves: RHEL-121674 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Ensure sde library built with proper flags. (RHEL-33515) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to official papi-7.1.0. - Fix i686 rawhide FTBFS. (rhbz#2254963) - Backport upstream patch, add new patch for autoconf C compatibility - RHEL-67571 password is ignored when set in web ui - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - the last change changes ABI - lprint has to be rebuilt - RHEL-50774 enlarge array for vendor specific attributtes - RHEL-25805 [pappl] rebase pappl to 1.4.6 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2255704 - pappl-1.4.4 is available - rebase to version 1.4.3 (#2250222) - Resolves: RHEL-71659 Fix additional memory leak - not detected by OSH - Fix Openscanhub issues (Resolves: RHEL-71659) - Initial commit on c10s Resolves: RHEL-25298 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix C type error in paps 0.6.8. Resolves: rhbz#2256906 - Use fmt in header-only mode in RHEL builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt due to fmt 10 update. - C99 compatibility fixes for paps 0.6.8 - New upstream release. Resolves: rhbz#2168726 - Resolves: RHEL-169635 RHEL-169642 RHEL-169646 - Resolves: RHEL-136495 RHEL-136314 - Resolves: RHEL-136314 RHEL-137440 RHEL-136495 - Resolves: RHEL-134949 RHEL-134953 - Resolves: RHEL-134120 - Resolves: RHEL-123425 RHEL-123683 - Resolves: RHEL-106425 - Resolves: RHEL-84285 - Resolves: RHEL-84285 - Resolves: RHEL-79788 - Resolves: RHEL-184108 RHEL-184099 - Resolves: RHEL-169635 RHEL-169642 RHEL-169646 - Resolves: RHEL-136495 RHEL-136314 - Resolves: RHEL-136314 RHEL-137440 RHEL-136495 - Resolves: RHEL-134949 RHEL-134953 - Resolves: RHEL-134120 - Resolves: RHEL-123425 RHEL-123683 - Resolves: RHEL-106425 - Resolves: RHEL-84285 - Resolves: RHEL-84285 - Resolves: RHEL-216655 - Resolves: RHEL-184108 RHEL-184099 - Resolves: RHEL-169635 RHEL-169642 RHEL-169646 - Resolves: RHEL-136495 RHEL-136314 - Resolves: RHEL-136314 RHEL-137440 RHEL-136495 - Resolves: RHEL-134949 RHEL-134953 - Resolves: RHEL-134120 - Resolves: RHEL-123425 RHEL-123683 - Resolves: RHEL-106425 - Resolves: RHEL-84285 - Resolves: RHEL-261248 - Resolves: RHEL-216655 - Resolves: RHEL-184108 RHEL-184099 - Resolves: RHEL-169635 RHEL-169642 RHEL-169646 - Resolves: RHEL-136495 RHEL-136314 - Resolves: RHEL-136314 RHEL-137440 RHEL-136495 - Resolves: RHEL-134949 RHEL-134953 - Resolves: RHEL-134120 - Resolves: RHEL-123425 RHEL-123683 - Resolves: RHEL-106425 - Resolves: RHEL-169635 RHEL-169642 RHEL-169646 - Resolves: RHEL-136495 RHEL-136314 - Resolves: RHEL-136314 RHEL-137440 RHEL-136495 - Resolves: RHEL-134949 RHEL-134953 - Resolves: RHEL-134120 - Resolves: RHEL-123425 RHEL-123683 - Resolves: RHEL-106425 - Resolves: RHEL-84285 - Resolves: RHEL-84285 - Resolves: RHEL-79788 - Resolves: RHEL-184108 RHEL-184099 - Resolves: RHEL-169635 RHEL-169642 RHEL-169646 - Resolves: RHEL-136495 RHEL-136314 - Resolves: RHEL-136314 RHEL-137440 RHEL-136495 - Resolves: RHEL-134949 RHEL-134953 - Resolves: RHEL-134120 - Resolves: RHEL-123425 RHEL-123683 - Resolves: RHEL-106425 - Resolves: RHEL-84285 - Resolves: RHEL-84285 - Resolves: RHEL-216655 - Resolves: RHEL-184108 RHEL-184099 - Resolves: RHEL-169635 RHEL-169642 RHEL-169646 - Resolves: RHEL-136495 RHEL-136314 - Resolves: RHEL-136314 RHEL-137440 RHEL-136495 - Resolves: RHEL-134949 RHEL-134953 - Resolves: RHEL-134120 - Resolves: RHEL-123425 RHEL-123683 - Resolves: RHEL-106425 - Resolves: RHEL-84285 - Resolves: RHEL-261248 - Resolves: RHEL-216655 - Resolves: RHEL-184108 RHEL-184099 - Resolves: RHEL-169635 RHEL-169642 RHEL-169646 - Resolves: RHEL-136495 RHEL-136314 - Resolves: RHEL-136314 RHEL-137440 RHEL-136495 - Resolves: RHEL-134949 RHEL-134953 - Resolves: RHEL-134120 - Resolves: RHEL-123425 RHEL-123683 - Resolves: RHEL-106425 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix deprecated patch macro - migrated to SPDX license - Port configure script to C99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Update libsigc++ dependency - Bump release for June 2024 mass rebuild - Add gating.yaml via API - upgrade to 6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump release because of gating.yaml change - Bump release because of ci.fmf change - Bump release because of gating.yaml change - Update license tag to conform with SPDX - Resolves: RHEL-35723 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - add pcilmr which allows margin PCIe Links (RHEL-95483) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix memory leak (#RHEL-44664) - Bump release for June 2024 mass rebuild - rebuild - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153) - add riscv64 build support (#RHEL-40383) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add /usr/bin/lspci symlink to fix detection by some games (#1858437) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix and bump release, resolve the issue of build not attaching to errata - Backport CVE fixes for CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161, CVE-2026-103111 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Another rebuild for gating - Rebuild for fixed gating and fmf tests - Rebase to version 10.44 - Bump release for June 2024 mass rebuild - Explicitly require uft subpackages in tools subpackage - Rebuilt for missing gating.yaml - Migrate licenses to SPDX format and add the forgotten - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix and bump release, resolve the issue of build not attaching to errata - Backport CVE fixes for CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161, CVE-2026-103111 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Another rebuild for gating - Rebuild for fixed gating and fmf tests - Rebase to version 10.44 - Bump release for June 2024 mass rebuild - Explicitly require uft subpackages in tools subpackage - Rebuilt for missing gating.yaml - Migrate licenses to SPDX format and add the forgotten - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix and bump release, resolve the issue of build not attaching to errata - Backport CVE fixes for CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161, CVE-2026-103111 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Another rebuild for gating - Rebuild for fixed gating and fmf tests - Rebase to version 10.44 - Bump release for June 2024 mass rebuild - Explicitly require uft subpackages in tools subpackage - Rebuilt for missing gating.yaml - Migrate licenses to SPDX format and add the forgotten - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - New upstream release. - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release (#2251427) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - New upstream release (#2213961) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Remove downstream patch breaking flatpak (#2054826) - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Patch the code to use https instead of http (CVE-2024-45321) - Resolves: RHEL-56507 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.7047 bump (rhbz#2227489) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Perl 5.38 rebuild - 3.02 bump - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode - Resolves: RHEL-181651 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Fix CVE-2026-9538: cap per-entry declared size during archive reading to prevent memory DoS - Resolves: RHEL-191918 - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode - Resolves: RHEL-181651 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update dependencies of sub-package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2.1700 bump (rhbz#2231059) - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Package tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 4.61 bump (rhbz#2257292) - Remove unused dependency perl(Test::CPAN::Changes) - 4.60 bump (rhbz#2247441) - 4.59 bump (rhbz#2241705) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 4.57 bump - Resolves: RHEL-79491 - Update man page - Resolves: RHEL-79491 - Fix permission for creating site directories - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.018 - Fix version requirement for CPAN::Meta::Prereqs - Move issue tracker to GitHub - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.017 - Use Module::Metadata for more accurate testing - Update to 0.015 - Drop Test::Deep prereq - Use SPDX-format license tag - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Perl 5.40 rebuild - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Perl 5.38 rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Upgrade to 1.54 as provided in perl-5.37.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Modernize spec. - Convert license to SPDX. - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - 2.212 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2.206 bump (rhbz#2225675) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 2.205 bump (rhbz#2223210) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Update to 2.212 - Package tests - Bump release for June 2024 mass rebuild - Rebuild against xz 5.4.6 (RHBZ#2260521) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild against xz 5.4.5 (RHBZ#2247487) - Rebuild against xz 5.4.4 (RHBZ#2228542) - Resolves: RHEL-132687 - Rebuild for latest zlib-ng - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - 2.212 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for zlib-ng in Rawhide - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - 0.36 bump - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 0.34 bump (bug #2229845) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update license field to new BSD-Systemics SPDX license id - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Package tidy-up - Use author-independent source URL - Fix "warning: missing braces around initializer [-Wmissing-braces]" - Avoid deprecated patch syntax - Simplify find command using -empty - Fix permissions verbosely - Fix C99 compatibility issue - Create directory structure under /var using tmpfiles.d - Remove sscg option --package from cyrus-imapd-init.service - Update location of fmf plans - update the default cyrus.conf to enable idled Resolves: RHEL-61130 - Bump release for October 2024 mass rebuild: - Bump release for Aug 2024 perl mass rebuild - Bump release for June 2024 mass rebuild - Update of fmf plans and gating for c10s - Cassandane: do not depend on imaptest, clean up BuildRequires - Re-enable LTO - Fix CVE-2024-34055 - Fix wrong symlinks to imtest utilities - Convert to %autorelease and %autochangelog - Resolves: RHEL-66250 - Remove notes about mariadb-connector-c and SSL - Resolves: RHEL-66250 - Updated notes related to the issue - Generate SSL needed for tests since mariadb-connector-c 3.4.x - Resolves: RHEL-66250 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Replace using mysql by mariadb in setup script - 1.23 bump (rhbz#2238227) - Fix FTBFS caused by planned change RHEL-68750 Resolves: RHEL-75748 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - 5.007 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 5.003 bump (rhbz#2252375) - 5.002 bump (rhbz#2245834) - Use community-mysql also for ELN - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 3.18.0 bump (rhbz#2253383) - Package tests - 3.17.0 bump (rhbz#2234337) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.74 bump (rhbz#2239708) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - 1.72 bump - Package tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix CVE-2014-10401 and CVE-2014-10402 - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Fix CVE-2026-9698: stack overflow and buffer overflow in DBI.xs - Resolves: RHEL-184980 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Fix CVE-2026-14380: unsafe string eval in DBI::Profile - Resolves: RHEL-211146 - Fix CVE-2026-14739: set a hard limit of 99999 on '?' placeholders - Resolves: RHEL-193293 - Fix CVE-2026-9698: stack overflow and buffer overflow in DBI.xs - Resolves: RHEL-184980 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Bump release for Aug 2024 java mass rebuild - Fix CVE-2026-19546: incomplete fix for CVE-2026-14380 in DBI::Profile Resolves: RHEL-236830 - Fix CVE-2026-14380: unsafe string eval in DBI::Profile - Resolves: RHEL-211146 - Fix CVE-2026-14739: set a hard limit of 99999 on '?' placeholders - Resolves: RHEL-193293 - Fix CVE-2026-9698: stack overflow and buffer overflow in DBI.xs - Resolves: RHEL-184980 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix CVE-2026-73194: enforce placeholder range limit on :N style placeholders Resolves: RHEL-247316 - Fix CVE-2026-19546: incomplete fix for CVE-2026-14380 in DBI::Profile Resolves: RHEL-236830 - Fix CVE-2026-14380: unsafe string eval in DBI::Profile - Resolves: RHEL-211146 - Fix CVE-2026-14739: set a hard limit of 99999 on '?' placeholders - Resolves: RHEL-193293 - Fix CVE-2026-9698: stack overflow and buffer overflow in DBI.xs - Resolves: RHEL-184980 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting Resolves: RHEL-271970 - Fix CVE-2026-73194: enforce placeholder range limit on :N style placeholders Resolves: RHEL-247316 - Fix CVE-2026-19546: incomplete fix for CVE-2026-14380 in DBI::Profile Resolves: RHEL-236830 - Fix CVE-2026-14380: unsafe string eval in DBI::Profile - Resolves: RHEL-211146 - Fix CVE-2026-14739: set a hard limit of 99999 on '?' placeholders - Resolves: RHEL-193293 - Fix CVE-2026-9698: stack overflow and buffer overflow in DBI.xs - Resolves: RHEL-184980 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Upgrade to 2.189 based on perl-5.40.0-RC1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 0.114 - Data::OptList now requires perl v5.12.0 - Tests no longer add "-T" to shebang, so do not invoke taint mode - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.113 (rhbz#2157247) - Update author contact info - Use SPDX-format license tag - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.200008 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.94 bump (rhbz#2257491) - Package tests - Adapt test envinronment guard to changes in 6.93 - List files explicitly - Run tests in parallel - Release: v6.93 (Sullivan Beck) - Checkpoint: v6.93 (Sullivan Beck) - Remove Travis (Sullivan Beck) - Initial checkin of next release cycle: 6.93 (Sullivan Beck) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 2213282 - Rebase to upstream version 6.92. - 2174484 - Rebase to upstream version 6.91. - Fix CVE-2026-60075: prevent quadratic-cost regex DoS in date/time parsing by rejecting overly long input strings Resolves: RHEL-239790 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Upgrade to 3.72 based on perl-5.40.0-RC1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - 0.84 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2.59 bump (rhbz#2256301) - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - 6.04 bump (rhbz#2173329) - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Resolves: RHEL-43260 - Update to 3.21 - Update License tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 3.20 bump (rhbz#2248987) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Package tests - Update license to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Resolves: RHEL-43260 - Update to 3.21 - Update License tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 3.20 bump (rhbz#2248987) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Upgrade to 1.06 as provided in perl-5.37.11 - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use SPDX-format license tag - Use %license unconditionally - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 5.78 bump (rhbz#2256294) - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.006002 Documentation - Link to Exporter::Almighty in pod - Update copyright dates Packaging - Set homepage in metadata to https://exportertiny.github.io - Update to 1.006001 Documentation - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual Packaging - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.006000 - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var module - Refactored the Perl 5.37.2+ lexical exporter support - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Upgrade to 0.280240 as provided in 5.40.0-RC1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Upgrade to 0.280238 as provided in perl-5.37.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - 2.22 bump - Package tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - 1.75 bump - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filter of dependencies - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Replace patch update from Perl release by CPAN upstream 3.51 (rhbz#2237243) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Upgrade to 3.51 as provided in perl-5.37.12 - Fix CVE-2025-40907 (integer overflow when parsing FastCGI parameters) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Specify all dependencies - Package examples - Package the tests - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Package tests - Simplify build and install phase - Update license to SPDX format - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.16 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license to SPDX format - Resolves: RHEL-132702 - Update tests for Image Mode - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filter of dependencies - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Modernize spec. - Convert license to SPDX. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 rebuild - 2.58 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2.57 bump (rhbz#2249036) - 2.55 bump (rhbz#2248884) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 2.52.0 - Resolves: RHEL-118145, RHEL-111334 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175 - update to 2.47.1 - Resolves: RHEL-63966 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - build without perl_modcompat in EL >= 10 - update to 2.45.2 - add glibc-utils BuildRequires - build docs with asciidoc instead of a asciidoctor - drop git-p4 subpackage - Resolves: RHEL-45572, RHEL-45215 - Bump release for June 2024 mass rebuild - update to 2.43.1 - resolves: #2263575 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - 3.82 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - 3.81 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.11 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Package tests - Update license to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 6.06 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Package tests - Update license to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.45 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Package tests - Patch for remove warning in test - Simplify build and install phases - Update license to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update run-requires for changing the `verify_SSL` default parameter from 0 to 1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 0.088 bump (rhbz#2222007) - Increase release to favour standalone package - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - 2.212 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2.206 bump (rhbz#2225676) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 2.205 bump (rhbz#2223222) - Fix CVE-2026-48962: remove use of eval in File::GlobMapper - Resolves: RHEL-180415 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - 2.212 bump - Bump release for June 2024 mass rebuild - Fix tests for Image Mode. Resolves: RHEL-136488 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 0.42 bump (rhbz#2225678) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Package tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 2.085 - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147) - Update PublicSuffix - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/ - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.084 - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143, GH#145 - Update documentation to reflect default SSL_version - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Disable optional IO::Socket::INET6 tests on ELN - Update to 2.083 - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL (regression from GH#122) - Update to 2.082 - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated (GH#122) - Fix output of alert string when debugging (GH#132) - Improve regex for hostname validation (GH#130, GH#126) - Add can_ciphersuites subroutine for feature checking (GH#127) - Utils::CERT_create - die if unexpected arguments are given instead of ignoring these - Avoid use of deprecated patch syntax - Update to 2.081 - New function set_msg_callback for user defined callback on each SSL message - Showcase function in example/ssl_client.pl and example/ssl_server.pl for computing JA3S/JA3 fingerprints - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - 1.15 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - 1.14 bump (rhbz#2159835) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Make perl-IPC-SysV-tests package noarch - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: RHEL-132904 - Update tests for Image Mode - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-46816 - disable optional tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Filter run-require perl(t::common.pl) (BZ#2163998) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Package tests - Update license to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - 0.13 bump - 0.12 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.11 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Package tests - Update license to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Bump release for Aug 2024 java mass rebuild - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Disable extra test in RHEL builds (based on https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1) - Silence build-time warnings about missing bundled modules - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Upgrade to 1.33 as provided in perl-5.37.11 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix %patch macro - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 rebuild - 2.003003 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2.003002 bump (rhbz#2257059) - 2.003001 bump (rhbz#2255925) - 2.002001 bump (rhbz#2253770) - 2.002000 bump (rhbz#2252546) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 0.5018 bump (rhbz#2257058) - 0.5017 bump (rhbz#2256784) - 0.5016 bump (rhbz#2255963) - 0.5015 bump (rhbz#2239928) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 0.4234 bump - Use author-independent source URL - Fix permissions verbosely - Make %files list more explicit - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - 0.4232 bump - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: RHEL-144358 - 5.20260119 bump - Resolves: RHEL-75799 - 5.20250120 bump - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 rebuild - 5.20240702 bump - Bump release for June 2024 mass rebuild - 5.20240129 bump (rhbz#2261642) - Resolves: RHEL-144358 - 5.20260119 bump - Resolves: RHEL-75799 - 5.20250120 bump - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 rebuild - 5.20240702 bump - Bump release for June 2024 mass rebuild - 5.20240129 bump (rhbz#2261642) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Increase release to favour standalone package - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Update to 1.000038 - Detects "class" syntax - Use SPDX-format license tag - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop redundant dependency of Digest::SHA1; implementation from Digest::SHA is used instead - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 20231213 bump - 20230821 bump - 20230807 bump - 20230801 bump - Fix %patch macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix %patch macro usage - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 6.23 bump - Fix comments in spec file (IO::Socket::INET6 is deprecated) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update license to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Upgrade to 2.76 as provided in perl-5.37.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Package tests - Unify to use macros - Update license to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add patch to add tests for other USM scenarios - Add patch to rewrite from Digest::SHA1 to Digest::SHA - Add patch to rewrite usage of HMAC with same dependencies - Add patch to split test files for better readability - Improve patch for switch from Socket6 to Socket - Package tests - Rename patch to better name with source dist version - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Modernize spec - Update license to SPDX format - Switch from Socket6 to Socket - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix test suite to work with OpenSSL 3.4.0 and newer Resolves: RHEL-92601 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Resolves: RHEL-33744 - Stop using OpenSSL ENGINE API - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.94 - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and 3.2, and LibreSSL 3.5-3.8 - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to compile, it should now be much easier to identify the cause - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl() function are now exposed, enabling fine-grained control over the initialisation and configuration of both libraries - libssl functions implementing TLS 1.3 PSK authentication are now exposed, in particular SSL_CTX_set_psk_find_session_callback() (on the server side) and SSL_CTX_set_psk_use_session_callback() (on the client side) - libssl functions implementing server-side TLS 1.2 PSK authentication are now exposed, in particular SSL_CTX_set_psk_server_callback() - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a TLS server to set a callback function that is executed when the server processes a ClientHello message - Many more libcrypto/libssl constants and functions are now exposed; see the release notes for the 1.93 developer releases for a full list - Rebuild for OpenSSL 3.1.1 in Rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix running of tests in perl-Net-Server-tests subpackage Resolves: RHEL-65278 - Sync OpenSSL Engine patch with upstream - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-47140 - Stop using OpenSSL ENGINE API routines in SSLeay - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Package tests - Update license to SPDX format - 2.014 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 0.010 bump - Update %patch macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Package tests - Update license to SPDX format - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Modernize spec - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Bump release for Aug 2024 java mass rebuild - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - 0.45 bump (rhbz#2259976) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 0.44 bump - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: RHEL-75802 - Upgrade to 3.91 as provided in 5.40.1 version of File::Spec was updated - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Upgrade to 3.91 as provided in 5.40.0-RC1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Upgrade to 3.89 as provided in perl-5.37.11 - Package tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - 1.77 bump (rhbz#2262670) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.76 bump (rhbz#2256687) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Add filter for private test module perl(helpers) - 3.45 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Filter provides from sub-package tests - Resolves: RHEL-36310 - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - update to 1.16 - update to 1.15 - Fix IPv6 functionality of SNMP_Session - Fix ipv6 - Modernize spec file - Use Artistic-2.0 macro - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - 2.038 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - 2.037 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Fix patch macro - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Update to 0.104006 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.104005 - Use %{make_build} and %{make_install} where appropriate - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 0.104004 (rhbz#2209461) - Rename Perl Artistic License to avoid confusion in detecting license - Update to 0.104003 (rhbz#2208530) - Add Artistic 1.0 Perl license and make Perl license use it - Remove extra "59" from LGPL-2.1 - Use SPDX-format license tag - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Upgrade to 3.32 as provided in perl-5.37.12 - Upgrade to 3.31 as provided in perl-5.37.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.991 - Make the requirement for perl v5.12.0 explicit; previously, it was only implicit because of prerequisites - Update to 0.990 - Fixes to keep working in v5.39 (GH#17, GH#18) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.929 (rhbz#2157199) - Update packaging and metadata - Use SPDX-format license tag - Use %license - Fix permissions verbosely - Simplify find command using -delete - Drop redundant buildroot cleaning in %install section - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Enable building for ppc64le - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Update to libguestfs-1.58.1-6 - daemon/listfs.ml: ignore CHS geometry error from parted (Veritas/Sun) - daemon: allow base64:/text: prefixes on Key parameters (binary LUKS keys) - daemon: move read_whole_file to common/utils and rewrite luks_* APIs in OCaml - Update common submodule - Apply patches with %autosetup -S git (a patch now adds binary test data) - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - Enable building for ppc64le - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Enable building for ppc64le - Add setfiles optional excludes parameter to libguestfs resolves: RHEL-239808 - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - 1.18 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Revert bundling Term::Table::HashBase, module is in Perl Core Resolves: RHEL-66303 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Disable non-core dependencies when bootstrapping a core module - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 0.018 bump - 0.017 bump - Fix %patch macro - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Port Configure.pm to C99 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 3.48 bump (rhbz#2241802) - 3.47 bump (rhbz#2231692) - 3.46 bump (rhbz#2229823) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Update to 1.302199 - Fix automatic detection of requires in *tests package - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Perl 5.40 rebuild - 0.000163 bump - Disable optional tests on RHEL - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 0.000159 bump - 0.000156 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Fix warning with undefined $unkpos (bug #2172819) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix tests for Image Mode. Resolves: RHEL-136489 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Modernize spec. - Convert license to SPDX. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update license to SPDX format - Use macros make_* - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Package tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - 2024.001 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - 2023.0511 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Upgrade to 1.9777 as provided in perl-5.40.0-RC1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Upgrade to 1.9775 as provided in perl-5.37.12 - Upgrade to 1.9774 as provided in perl-5.37.11 - Package tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - 1.35 bump - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Resolves: RHEL-36643, RHEL-41058 - Move away from xvfb-run - Bump release for June 2024 mass rebuild - Fix failing build and tests - Resolves: RHEL-25977 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Fix %patch macro - Update license to SPDX format - Port to C99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - 5.27 bump (rhbz#2263535) - 5.26 bump (rhbz#2262451) - 5.25 bump (rhbz#2260642) - 5.24 bump (rhbz#2260409) - 5.22 bump (rhbz#2260363) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 5.21 bump (rhbz#2233885) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - CVE-2026-19953 perl-URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization hostname encoding via missing Unicode normalization Resolves: RHEL-274901 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Upgrade to 1.32 as provided in perl-5.37.11 - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Remove Requires for bash, it's autogenerated - Package tests - Update license to SPDX format - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - 2.0210 bump (rhbz#2260127) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Restore compatibility with libxml-2.12.0 (bug #2251181) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 2.0209 bump (rhbz#2223070) - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix out-of-bounds heap read on truncated UTF-8 sequences (CVE-2026-8177) - Resolves: RHEL-186521 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix CVE-2006-10002, CVE-2006-10003 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.31 (rhbz#2255994) - Update docs to recommend YAML::PP - Package description updated as per upstream documentation - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2.37 bump (rhbz#2256130) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 0.67 bump (rhbz#2256265) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Modernize spec - Package tests - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Resolves: RHEL-43260 - Update to 3.21 - Update License tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 3.20 bump (rhbz#2248987) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - 0.032 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - 0.031 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - 1.16 bump - 1.15 bump - Package tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to Fedora Rawhide resolves: RHEL-56804 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Perl 5.40 rebuild - Rebuilt for Python 3.13 - OCaml 5.2.0 for Fedora 41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Update license to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Fix patch macro - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - 6.76 bump - 6.74 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.73 bump - 6.72 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 6.71 bump - 6.70 bump - Fix %patch macro - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix filters of dependencies - Increase release to favour standalone package - Package tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Update to 0.241 - Actually include the changes documented for version 0.240 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - 5.20240218 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 5.20230812 bump (rhbz#2231653) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - 5.20230701 bump (rhbz#2219017) - Package tests - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - 5.01 bump - 5.00 bump - Package tests - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable perl_bootstrap for perl 5.40 rebuild - Perl 5.40 rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Disable perl_bootstrap for perl 5.38 rebuild - Perl 5.38 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Upgrade to 2.40 as provided in perl-5.40.0-RC1 - Bump release for June 2024 mass rebuild - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Upgrade to 2.36 as provided in perl-5.37.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Increase release to favour standalone package - Upgrade to 1.69 as provided in perl-5.40.0-RC1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Increase release to favour standalone package - Upgrade to 1.68 as provided in perl-5.37.11 - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - Perl 5.40 rebuild - 0.9932 bump - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 0.9930 bump (rhbz#2238421) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 re-rebuild of bootstrapped packages - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87185 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Perl 5.40 re-rebuild of bootstrapped packages - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod) - Subpackage Term-Table - Subpackage Test-Suite2 - Bump release for June 2024 mass rebuild - Disable using libdb for RHEL - Resolves: RHEL-33071 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fixes: CVE-2026-13221 - regcomp_study: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>) - Resolves: RHEL-87186 - Resolves: RHEL-75798 - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>) - Add config.over to make build od perl reproducible - Removed unnecessary conversion - Add new systemtap-sdt-dtrace to build deps - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add versioned x86_64 arches support - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add riscv64. - Fix incorrect calloc() invocations caught by -Wcalloc-transposed-args - cms_common: Fixed Segmentation fault - New upstream release (116) - Resolves: CVE-2022-3560 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add missing ACC200 (VRB1) data files (#2178689) - Rebuilt after adding gating - Update to 22.11 - Update to v1.5.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add provide postgresqlVERSION-pg_repack - enable zstd support - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add postgresql_default macro to be able to decide which version of extension is the default one in the repository - Build without modules - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add provide postgresqlVERSION-pgaudit - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add macro postgresql_default to be able set up default version in distro - Add symbop pgaudit-any - Update to 16.0 - Initial import of demodularized version - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuild for new PostgreSQL 15 - Rebuild for Konflux (Resolves: RHEL-84822) - Rebuild for Konflux - Related: RHEL-79677 - Release bump - Related: RHEL-73444 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 1.10.14 - drop patches merged upstream - fix more deprecations from https://github.com/pear/pear-core/pull/127 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - fix PHP 8.2 deprecations using patch from https://github.com/pear/pear-core/pull/124 - use SPDX license IDs - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 5.1.23 - rebuild for https://fedoraproject.org/wiki/Changes/php83 - build out of sources tree - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - use SPDX license ID - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 5.1.23 - rebuild for https://fedoraproject.org/wiki/Changes/php83 - build out of sources tree - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - use SPDX license ID - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - ignore 1 ONLINE test - RHEL build - update to 6.1.0 - drop patch merged upstream - update to 6.1.0RC2 - fix test suite with redis 6.2 using patch from https://github.com/phpredis/phpredis/pull/2555 - cleanup and modernize spec file - use valkey on Fedora 41 - add upstream patch for PHP 8.4 - update to 6.0.2 - update to 6.0.1 - cleanup SCL stuff for Fedora review - update to 6.0.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - ignore incompatible-pointer-types see #2264827 - fix incompatible pointer types using patch from https://github.com/php/pecl-processing-rrd/pull/4 - build out of sources tree - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebuild for https://fedoraproject.org/wiki/Changes/php83 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - use SPDX license ID - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 3.3.1 - add upstream patch for test suite - update to 3.3.0 - fix configuration file using patch from https://github.com/xdebug/xdebug/pull/916 - update to 3.3.0alpha3 - update to 3.3.0alpha2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 1.22.3 - build out of sources tree - rebuild for https://fedoraproject.org/wiki/Changes/php83 - update to 1.22.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - update to 1.22.1 - use SPDX license ID - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.7 - backport Argon2 password hashing in OpenSSL ext - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Bump release for June 2024 mass rebuild - rebuild - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.12 - enable command history in phpdbg - rebase to 8.3.10 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - fix dependencies - support building with another name prefix - update to 5.1.27 - update to 5.1.26 - cleanup spec file, remove ZTS stuff and very old Obsoletes - add pie Provides - refresh configuration for new option and new default values - update to 5.1.25 - re-license spec file to CECILL-2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - rebuild for https://fedoraproject.org/wiki/Changes/php84 - update to 5.1.24 - fix dependencies - support building with another name prefix - update to 5.1.27 - update to 5.1.26 - cleanup spec file, remove ZTS stuff and very old Obsoletes - add pie Provides - refresh configuration for new option and new default values - update to 5.1.25 - re-license spec file to CECILL-2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - rebuild for https://fedoraproject.org/wiki/Changes/php84 - update to 5.1.24 - fix dependencies - add patch for redis 8 - build for php8.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - update to 6.2.0 - re-license spec file to CECILL-2.1 - add virtual provides for pie - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - ignore 1 ONLINE test - rebuild for https://fedoraproject.org/wiki/Changes/php84 - update to 6.1.0 - cleanup and modernize spec file - use valkey on Fedora 41 - add upstream patch for PHP 8.4 - fix dependencies and cleanup - build for php8.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - rebuild for https://fedoraproject.org/wiki/Changes/php84 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - drop 32-bit support https://fedoraproject.org/wiki/Changes/php_no_32_bit - ignore incompatible-pointer-types see #2264827 - fix incompatible pointer types using patch from https://github.com/php/pecl-processing-rrd/pull/4 - build out of sources tree - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fix dependencies - update to 3.4.7 - build for php8.4 - update to 3.4.5 - update to 3.4.4 - update to 3.4.3 - update to 3.4.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - update to 3.4.1 - update to 3.4.0 - fix dependencies - update to 1.22.7 - build for php8.4 - update to 1.22.6 - update to 1.22.5 - re-license spec file to CECILL-2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - rebuild for https://fedoraproject.org/wiki/Changes/php84 - update to 1.22.4 - modernize spec file - rebuild for broken ABI in 8.3.10, fixed in 8.3.11RC2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - Update to 8.4.11RC1 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - Update to 8.4.11 - http://www.php.net/releases/8_4_11.php - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Update to 8.4.12 - http://www.php.net/releases/8_4_12.php - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - add option to build as php8.4 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - rebase to 8.4.27 - rebase to 8.4.24 - rebase to 8.4.23 - rebase to 8.4.21 - rebase to 8.4.16 - fix the package descriptions - add missing dependency on net-snmp - fix tmpfiles.d configuration file name - fix spec file name - Update to 8.4.14 - http://www.php.net/releases/8_4_14.php - add tmpfiles.d configuration file for ImageMode - Update to 8.4.13 - http://www.php.net/releases/8_4_13.php - Update to 1.3.1 (RHEL-65398) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - New upstream release (#2270095) - Use gcr-4 in gnome3 binary - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Disable qt in RHEL 10 builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.3.1 (RHEL-65398) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - New upstream release (#2270095) - Use gcr-4 in gnome3 binary - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Disable qt in RHEL 10 builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.3.1 (RHEL-65398) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - New upstream release (#2270095) - Use gcr-4 in gnome3 binary - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Disable qt in RHEL 10 builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164826 - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebase to 1.4.9 Resolves: RHEL-129575 - Update version to 1.4.6 Resolves: DESKTOP-1857 - Update version to 1.2.7 - Resolves: RHEL-76017 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update version to 1.2.6 - Update version to 1.2.3 - pipewire-jack-libs Requires pipewire-jack on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update version to 1.2.1 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.43.4 - Resolves: https://issues.redhat.com/browse/RHEL-45709 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.43.0 - SPDX migration: license is already SPDX compatible - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 0.42.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.43.4 - Resolves: https://issues.redhat.com/browse/RHEL-45709 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.43.0 - SPDX migration: license is already SPDX compatible - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 0.42.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Switch Java compiler source/target to 1.8 - Resolves: RHEL-52703 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild - Use implicit maven toolchains - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update to upstream version 2.8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 2.7.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update to upstream version 2.2.0 - Drop obsolete plexus-containers-container-default - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild - Use implicit maven toolchains - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Update to upstream version 1.27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild - Use implicit maven toolchains - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with default JDK 17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165336 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Convert to SPDX license tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Port configure script to C99 (#2161952) - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - AlmaLinux changes: AlmaLinux change: Add in the symlink for fedora-gdm- logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix duplicated dmesg output on boot and shutdown - Backport upstream crash fix (rhbz#2282384) - Probe simpledrm immediately (rhbz#2183743, rhbz#2274770) - Fix redhat-fonts dependencies - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add dep on graphics libs to -devel - adding gating - Move font substitution to %prep where it belongs - Fix CPPFLAGS use for aarch64 Resolves: RHEL-70718 - Fix rpminspect failures for aarch64 Resolves: RHEL-70718 - Fix rpminspect failures Resolves: RHEL-70718 - Add pmix_test Resolves: RHEL-70718 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update pmix to 4.2.8 - Exclude ix86, configure: abort in 32-bit environments https://github.com/openpmix/openpmix/pull/2892 and Open MPI v5.0.x does not support 32 bit https://github.com/open-mpi/ompi/issues/11248 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245) - Update to 4.2.7 - Enable IPv6 support - Disable wrapper rpath - Fix CPPFLAGS use for aarch64 Resolves: RHEL-70718 - Fix rpminspect failures for aarch64 Resolves: RHEL-70718 - Fix rpminspect failures Resolves: RHEL-70718 - Add pmix_test Resolves: RHEL-70718 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update pmix to 4.2.8 - Exclude ix86, configure: abort in 32-bit environments https://github.com/openpmix/openpmix/pull/2892 and Open MPI v5.0.x does not support 32 bit https://github.com/open-mpi/ompi/issues/11248 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245) - Update to 4.2.7 - Enable IPv6 support - Disable wrapper rpath - Fix CPPFLAGS use for aarch64 Resolves: RHEL-70718 - Fix rpminspect failures for aarch64 Resolves: RHEL-70718 - Fix rpminspect failures Resolves: RHEL-70718 - Add pmix_test Resolves: RHEL-70718 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update pmix to 4.2.8 - Exclude ix86, configure: abort in 32-bit environments https://github.com/openpmix/openpmix/pull/2892 and Open MPI v5.0.x does not support 32 bit https://github.com/open-mpi/ompi/issues/11248 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245) - Update to 4.2.7 - Enable IPv6 support - Disable wrapper rpath - RHEL-59030 pnm2ppa --help dumps core on aarch64 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebase to 1.13 - license rescan and SPDX conversion - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Enable build_with_btrfs on AlmaLinux 10 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - Related: RHEL-168736 - enable sequoia - Resolves: RHEL-56365 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-122178 - update to rhel-10.1.z version of podman - Related: RHEL-111917 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL10.1 packaging" - Related: RHEL-80817 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Can not find network create and rm message from podman event when set --events-backend to journald" - Related: RHEL-109790 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80817 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80817 - Remove copr related seds from spec - Related: RHEL-80817 - Enable build_with_btrfs on AlmaLinux 10 - Rebuild for CVE-2026-111943 - Resolves: RHEL-287477 - update to the latest upstream commit bd9083e0 - Resolves: RHEL-271981 - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 - update to the latest upstream commit 66780e9b - Resolves: RHEL-240087 - Rebuild for golang CVE fixes - Resolves: RHEL-229846 RHEL-240087 RHEL-241164 RHEL-241603 RHEL-241741 RHEL-241990 RHEL-242165 RHEL-242240 RHEL-250818 RHEL-251815 - rebuild for CVE-2026-33810 - Resolves: RHEL-229846 - rebuild for CVE-2026-39822 - Resolves: RHEL-193642 - update to the latest state of the sustaining branch - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681 CVE-2026-27136 - Resolves: RHEL-173842 RHEL-185604 RHEL-185920 RHEL-186263 RHEL-188713 RHEL-190073 RHEL-190857 RHEL-191095 RHEL-191546 RHEL-192440 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Enable build_with_btrfs on AlmaLinux 10 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158493 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165012 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes Update Podman to support TLS 1.3 configuration - Resolves: RHEL-153732 - enable sequoia - Resolves: RHEL-56365 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-122178 - update to rhel-10.1.z version of podman - Related: RHEL-111917 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL10.1 packaging" - Related: RHEL-80817 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Can not find network create and rm message from podman event when set --events-backend to journald" - Related: RHEL-109790 - Enable build_with_btrfs on AlmaLinux 10 - rebuild for CVE-2026-39822 - Resolves: RHEL-193642 - update to the latest state of the sustaining branch - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681 CVE-2026-27136 - Resolves: RHEL-173842 RHEL-185604 RHEL-185920 RHEL-186263 RHEL-188713 RHEL-190073 RHEL-190857 RHEL-191095 RHEL-191546 RHEL-192440 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158493 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165012 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes Update Podman to support TLS 1.3 configuration - Resolves: RHEL-153732 - enable sequoia - Resolves: RHEL-56365 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-122178 - update to rhel-10.1.z version of podman - Related: RHEL-111917 - Enable build_with_btrfs on AlmaLinux 10 - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 - update to the latest upstream commit 66780e9b - Resolves: RHEL-240087 - Rebuild for golang CVE fixes - Resolves: RHEL-229846 RHEL-240087 RHEL-241164 RHEL-241603 RHEL-241741 RHEL-241990 RHEL-242165 RHEL-242240 RHEL-250818 RHEL-251815 - rebuild for CVE-2026-33810 - Resolves: RHEL-229846 - rebuild for CVE-2026-39822 - Resolves: RHEL-193642 - update to the latest state of the sustaining branch - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681 CVE-2026-27136 - Resolves: RHEL-173842 RHEL-185604 RHEL-185920 RHEL-186263 RHEL-188713 RHEL-190073 RHEL-190857 RHEL-191095 RHEL-191546 RHEL-192440 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158493 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165012 - Enable build_with_btrfs on AlmaLinux 10 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - Related: RHEL-168736 - enable sequoia - Resolves: RHEL-56365 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-122178 - update to rhel-10.1.z version of podman - Related: RHEL-111917 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL10.1 packaging" - Related: RHEL-80817 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Can not find network create and rm message from podman event when set --events-backend to journald" - Related: RHEL-109790 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80817 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80817 - Remove copr related seds from spec - Related: RHEL-80817 - Enable build_with_btrfs on AlmaLinux 10 - Rebuild for CVE-2026-111943 - Resolves: RHEL-287477 - update to the latest upstream commit bd9083e0 - Resolves: RHEL-271981 - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 - update to the latest upstream commit 66780e9b - Resolves: RHEL-240087 - Rebuild for golang CVE fixes - Resolves: RHEL-229846 RHEL-240087 RHEL-241164 RHEL-241603 RHEL-241741 RHEL-241990 RHEL-242165 RHEL-242240 RHEL-250818 RHEL-251815 - rebuild for CVE-2026-33810 - Resolves: RHEL-229846 - rebuild for CVE-2026-39822 - Resolves: RHEL-193642 - update to the latest state of the sustaining branch - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681 CVE-2026-27136 - Resolves: RHEL-173842 RHEL-185604 RHEL-185920 RHEL-186263 RHEL-188713 RHEL-190073 RHEL-190857 RHEL-191095 RHEL-191546 RHEL-192440 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Enable build_with_btrfs on AlmaLinux 10 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158493 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165012 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes Update Podman to support TLS 1.3 configuration - Resolves: RHEL-153732 - enable sequoia - Resolves: RHEL-56365 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-122178 - update to rhel-10.1.z version of podman - Related: RHEL-111917 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL10.1 packaging" - Related: RHEL-80817 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Can not find network create and rm message from podman event when set --events-backend to journald" - Related: RHEL-109790 - Enable build_with_btrfs on AlmaLinux 10 - rebuild for CVE-2026-39822 - Resolves: RHEL-193642 - update to the latest state of the sustaining branch - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681 CVE-2026-27136 - Resolves: RHEL-173842 RHEL-185604 RHEL-185920 RHEL-186263 RHEL-188713 RHEL-190073 RHEL-190857 RHEL-191095 RHEL-191546 RHEL-192440 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158493 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165012 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes Update Podman to support TLS 1.3 configuration - Resolves: RHEL-153732 - enable sequoia - Resolves: RHEL-56365 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-122178 - update to rhel-10.1.z version of podman - Related: RHEL-111917 - Enable build_with_btrfs on AlmaLinux 10 - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 - update to the latest upstream commit 66780e9b - Resolves: RHEL-240087 - Rebuild for golang CVE fixes - Resolves: RHEL-229846 RHEL-240087 RHEL-241164 RHEL-241603 RHEL-241741 RHEL-241990 RHEL-242165 RHEL-242240 RHEL-250818 RHEL-251815 - rebuild for CVE-2026-33810 - Resolves: RHEL-229846 - rebuild for CVE-2026-39822 - Resolves: RHEL-193642 - update to the latest state of the sustaining branch - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681 CVE-2026-27136 - Resolves: RHEL-173842 RHEL-185604 RHEL-185920 RHEL-186263 RHEL-188713 RHEL-190073 RHEL-190857 RHEL-191095 RHEL-191546 RHEL-192440 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158493 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165012 - Enable build_with_btrfs on AlmaLinux 10 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - Related: RHEL-168736 - enable sequoia - Resolves: RHEL-56365 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-122178 - update to rhel-10.1.z version of podman - Related: RHEL-111917 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL10.1 packaging" - Related: RHEL-80817 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Can not find network create and rm message from podman event when set --events-backend to journald" - Related: RHEL-109790 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80817 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80817 - Remove copr related seds from spec - Related: RHEL-80817 - Enable build_with_btrfs on AlmaLinux 10 - Rebuild for CVE-2026-111943 - Resolves: RHEL-287477 - update to the latest upstream commit bd9083e0 - Resolves: RHEL-271981 - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 - update to the latest upstream commit 66780e9b - Resolves: RHEL-240087 - Rebuild for golang CVE fixes - Resolves: RHEL-229846 RHEL-240087 RHEL-241164 RHEL-241603 RHEL-241741 RHEL-241990 RHEL-242165 RHEL-242240 RHEL-250818 RHEL-251815 - rebuild for CVE-2026-33810 - Resolves: RHEL-229846 - rebuild for CVE-2026-39822 - Resolves: RHEL-193642 - update to the latest state of the sustaining branch - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681 CVE-2026-27136 - Resolves: RHEL-173842 RHEL-185604 RHEL-185920 RHEL-186263 RHEL-188713 RHEL-190073 RHEL-190857 RHEL-191095 RHEL-191546 RHEL-192440 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Enable build_with_btrfs on AlmaLinux 10 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158493 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165012 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes Update Podman to support TLS 1.3 configuration - Resolves: RHEL-153732 - enable sequoia - Resolves: RHEL-56365 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-122178 - update to rhel-10.1.z version of podman - Related: RHEL-111917 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL10.1 packaging" - Related: RHEL-80817 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Can not find network create and rm message from podman event when set --events-backend to journald" - Related: RHEL-109790 - Enable build_with_btrfs on AlmaLinux 10 - rebuild for CVE-2026-39822 - Resolves: RHEL-193642 - update to the latest state of the sustaining branch - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681 CVE-2026-27136 - Resolves: RHEL-173842 RHEL-185604 RHEL-185920 RHEL-186263 RHEL-188713 RHEL-190073 RHEL-190857 RHEL-191095 RHEL-191546 RHEL-192440 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158493 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165012 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes Update Podman to support TLS 1.3 configuration - Resolves: RHEL-153732 - enable sequoia - Resolves: RHEL-56365 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-122178 - update to rhel-10.1.z version of podman - Related: RHEL-111917 - Enable build_with_btrfs on AlmaLinux 10 - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 - update to the latest upstream commit 66780e9b - Resolves: RHEL-240087 - Rebuild for golang CVE fixes - Resolves: RHEL-229846 RHEL-240087 RHEL-241164 RHEL-241603 RHEL-241741 RHEL-241990 RHEL-242165 RHEL-242240 RHEL-250818 RHEL-251815 - rebuild for CVE-2026-33810 - Resolves: RHEL-229846 - rebuild for CVE-2026-39822 - Resolves: RHEL-193642 - update to the latest state of the sustaining branch - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681 CVE-2026-27136 - Resolves: RHEL-173842 RHEL-185604 RHEL-185920 RHEL-186263 RHEL-188713 RHEL-190073 RHEL-190857 RHEL-191095 RHEL-191546 RHEL-192440 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167501 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158493 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165012 - Update to 0.4.0-pqc.2 - Enable PQC algorithms - Unbundle capnproto - Update to 0.2.0 release - gating setup - Initial import from Fedora - Update to 0.4.0-pqc.3 for LLVM 22 compatibility - Update to 0.4.0-pqc.2 - Enable PQC algorithms - Unbundle capnproto - Update to 0.2.0 release - gating setup - Initial import from Fedora - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.8-rc1 release - Several sandbox and seunshare security improvements - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.8-rc1 release - Several sandbox and seunshare security improvements - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.8-rc1 release - Several sandbox and seunshare security improvements - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.8-rc1 release - Several sandbox and seunshare security improvements - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.8-rc1 release - Several sandbox and seunshare security improvements - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - changing log level via dbus is now restricted to root - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f - Resolves: RHEL-90807 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - late easyfix for new release - Resolves: RHEL-55287 - rebase to polkit-125 - Resolves: RHEL-55287 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebase to polkit-124 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - align sysusers implementation with Fedora guidelines, fixes upstream CI - backport of removal of IPAddressDeny sandboxing option - Resolves: bz#2248838 - NOTICE (jrybar): the record 125-4 below was added in manually after Ymir's initial - commit 125-3.1. For some reason, 125-3.1 for rhel-10.2 was based on contents - of rhel-10.0 release instead of version 125-4 present in rhel-10.1. - Fix CVE-2026-4897: string overflow in polkit agent helper Resolves: RHEL-218025 - changing log level via dbus is now restricted to root - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - late easyfix for new release - Resolves: RHEL-55287 - rebase to polkit-125 - Resolves: RHEL-55287 - changing log level via dbus is now restricted to root - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f - Resolves: RHEL-90807 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - late easyfix for new release - Resolves: RHEL-55287 - rebase to polkit-125 - Resolves: RHEL-55287 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebase to polkit-124 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - align sysusers implementation with Fedora guidelines, fixes upstream CI - backport of removal of IPAddressDeny sandboxing option - Resolves: bz#2248838 - NOTICE (jrybar): the record 125-4 below was added in manually after Ymir's initial - commit 125-3.1. For some reason, 125-3.1 for rhel-10.2 was based on contents - of rhel-10.0 release instead of version 125-4 present in rhel-10.1. - Fix CVE-2026-4897: string overflow in polkit agent helper Resolves: RHEL-218025 - changing log level via dbus is now restricted to root - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - late easyfix for new release - Resolves: RHEL-55287 - rebase to polkit-125 - Resolves: RHEL-55287 - Check bitmap in combine() - Resolves: RHEL-131783, RHEL-131782 - Backport fix for issues found by Coverity - Resolves: RHEL-71952 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix crash in broken documents when using -dests - Resolves: RHEL-44326 - Bump release for June 2024 mass rebuild - Migrated to SPDX license - Update to 24.02.0 - Resolves: #2237549 - update to 24.01.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Bump NVR for MR - Resolves: RHEL-180565 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180565 - Check bitmap in combine() - Resolves: RHEL-131783, RHEL-131782 - Backport fix for issues found by Coverity - Resolves: RHEL-71952 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix crash in broken documents when using -dests - Resolves: RHEL-44326 - Bump release for June 2024 mass rebuild - Check bitmap in combine() - Resolves: RHEL-131783, RHEL-131782 - Backport fix for issues found by Coverity - Resolves: RHEL-71952 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix crash in broken documents when using -dests - Resolves: RHEL-44326 - Bump release for June 2024 mass rebuild - Migrated to SPDX license - Update to 24.02.0 - Resolves: #2237549 - update to 24.01.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Bump NVR for MR - Resolves: RHEL-180565 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180565 - Check bitmap in combine() - Resolves: RHEL-131783, RHEL-131782 - Backport fix for issues found by Coverity - Resolves: RHEL-71952 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix crash in broken documents when using -dests - Resolves: RHEL-44326 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Check bitmap in combine() - Resolves: RHEL-131783, RHEL-131782 - Backport fix for issues found by Coverity - Resolves: RHEL-71952 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix crash in broken documents when using -dests - Resolves: RHEL-44326 - Bump release for June 2024 mass rebuild - Migrated to SPDX license - Update to 24.02.0 - Resolves: #2237549 - update to 24.01.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Bump NVR for MR - Resolves: RHEL-180565 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180565 - Check bitmap in combine() - Resolves: RHEL-131783, RHEL-131782 - Backport fix for issues found by Coverity - Resolves: RHEL-71952 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix crash in broken documents when using -dests - Resolves: RHEL-44326 - Bump release for June 2024 mass rebuild - Check bitmap in combine() - Resolves: RHEL-131783, RHEL-131782 - Backport fix for issues found by Coverity - Resolves: RHEL-71952 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix crash in broken documents when using -dests - Resolves: RHEL-44326 - Bump release for June 2024 mass rebuild - Migrated to SPDX license - Update to 24.02.0 - Resolves: #2237549 - update to 24.01.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Bump NVR for MR - Resolves: RHEL-180565 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180565 - Check bitmap in combine() - Resolves: RHEL-131783, RHEL-131782 - Backport fix for issues found by Coverity - Resolves: RHEL-71952 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix crash in broken documents when using -dests - Resolves: RHEL-44326 - Bump release for June 2024 mass rebuild - Check bitmap in combine() - Resolves: RHEL-131783, RHEL-131782 - Backport fix for issues found by Coverity - Resolves: RHEL-71952 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix crash in broken documents when using -dests - Resolves: RHEL-44326 - Bump release for June 2024 mass rebuild - Migrated to SPDX license - Update to 24.02.0 - Resolves: #2237549 - update to 24.01.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Bump NVR for MR - Resolves: RHEL-180565 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180565 - Check bitmap in combine() - Resolves: RHEL-131783, RHEL-131782 - Backport fix for issues found by Coverity - Resolves: RHEL-71952 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix crash in broken documents when using -dests - Resolves: RHEL-44326 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Correct a license tag to "MIT AND LicenseRef-Fedora-Public-Domain" - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2259469 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2259469 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2259469 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2259469 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2259469 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2259469 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2259469 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2259469 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. Resolves: RHEL-138726 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped mail group configuration / creation, it is provided by setup Resolves: RHEL-27174 - Fixed postlog RPM verification Resolves: RHEL-50584 - Explicitly set default_database_type if lmdb map is used Resolves: RHEL-50557 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2259469 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Rebuild (gdal) - Fix CVE-2026-73515: validate flatgeobuf input buffers before decoding - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Rebuild (gdal) - Fix CVE-2026-73515: validate flatgeobuf input buffers before decoding - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Rebuild (gdal) - Fix CVE-2026-73515: validate flatgeobuf input buffers before decoding - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Rebuild (gdal) - Fix CVE-2026-73515: validate flatgeobuf input buffers before decoding - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Rebuild (gdal) - Fix CVE-2026-73515: validate flatgeobuf input buffers before decoding - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add provide postgresqlVERSION-decoderbufs - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add macro postgresql_default to be able set up default version in distro - Add symbol postgres-decoderbufs-any - Release bump - Version for demodularized postgresql 16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebase to the newest version - Fix compatibility with PostgreSQL 15 - Use autosetup - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Add tests for CVE-2026-42198 - Limit SCRAM PBKDF2 iterations to prevent DoS via malicious server - Resolves: RHEL-173479 - Rebase to 42.7.2 - Resolves: CVE-2024-1597 - Bundle shaded ongres-* dependencies - Fix BuildRequires - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild - Rebuild without generated Requires - Bump release for June 2024 mass rebuild - Rebase to 42.7.2 - Resolves: CVE-2024-1597 - Bundle shaded ongres-* dependencies - Fix BuildRequires - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild - Rebuild without generated Requires - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 16.00.0000 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix typos in specfile - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149365 RHEL-149399 RHEL-149333 - Update to 16.11 - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2] - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql - Add OpenSSL support to upgrade_configure function - This ensures upgrade server is compiled with OpenSSL support - Required for SSL/TLS connections during database upgrades - Update to 16.10 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Initial commit on c10s - Resolves: RHEL-127261 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Initial commit on c10s - Resolves: RHEL-128178 - Initial commit on c10s - Resolves: RHEL-128174 - Initial commit on c10s - Resolves: RHEL-128172 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Rebuild for pg18 - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Fix CVE-2026-73515: validate FlatGeobuf input buffers before decoding - Rebuild for pg18 - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild for pg18 - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Fix CVE-2026-73515: validate FlatGeobuf input buffers before decoding - Rebuild for pg18 - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild for pg18 - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Fix CVE-2026-73515: validate FlatGeobuf input buffers before decoding - Rebuild for pg18 - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild for pg18 - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Fix CVE-2026-73515: validate FlatGeobuf input buffers before decoding - Rebuild for pg18 - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild for pg18 - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Fix CVE-2026-73515: validate FlatGeobuf input buffers before decoding - Rebuild for pg18 - Avoid perl(Pg) dependency on RHEL, adapted from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Update to 18.6 - Fix CVE-2026-18408 - Fix CVE-2026-6464 - Update to 18.4 - Fix CVE-2026-6478 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - create user and group using useradd/groupadd - Update to 18.1 - Bump release for gating - Initial commit on c10s - Resolves: RHEL-116546 - Resolves: RHEL-60823, Move potrace-devel to CRB repository - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Resolves: RHEL-35824, convert license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Converted license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Converted license tag to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fixed FTBFS with gcc-14 Resolves: rhbz#2261530 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Converted license tag to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Switched to the github fork - New version Resolves: rhbz#2143702 - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Update to 9.5.0 - SPDX migration of proj-data - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 9.4.1 - Fix doc dir ownership - Update to 9.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Disable tests during build that are flaky - Rebuilt for tests directory - Copy patch from c9s to make emacs dependency optional Resolves: RHEL-93236 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - copy gating.yaml from c9s - Bump release for June 2024 mass rebuild - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Disable tests during build that are flaky - Rebuilt for tests directory - Copy patch from c9s to make emacs dependency optional Resolves: RHEL-93236 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - copy gating.yaml from c9s - Bump release for June 2024 mass rebuild - Fix gating failures Resolves: RHEL-70719 - Fix build failure for s390x Resolves: RHEL-70719 - Fix gaiting failure Resolves: RHEL-70719 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop obsolete pandoc dependency - Update to 3.0.2 - Rebuild for pmix 4.1.3 - Fix gating failures Resolves: RHEL-70719 - Fix build failure for s390x Resolves: RHEL-70719 - Fix gaiting failure Resolves: RHEL-70719 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Drop obsolete pandoc dependency - Update to 3.0.2 - Rebuild for pmix 4.1.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - drop the legacy compat package (#2054527) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 47.13 - Update to 47.12 - Update to 47.10 - Update to 47.8 - Update to 47.7 - Update Ptyxis to 47.6 - Update to Ptyxis 47.5 - Update to Ptyxis 47.4 - Bump release for October 2024 mass rebuild: - Obsolete gnome-terminal-nautilus - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update list to 20240107 - Update list to 20230812 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update list to 20230614 - Update list to 20230318 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix license fields some more Resolves: DESKTOP-1151 - Fix license field Resolves: DESKTOP-1151 - Do not build daemon on RHEL Resolves: DESKTOP-1151 - convert license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 17.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Add padsp again (rhbz#2120847) - Fix license fields some more Resolves: DESKTOP-1151 - Fix license field Resolves: DESKTOP-1151 - Do not build daemon on RHEL Resolves: DESKTOP-1151 - convert license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 17.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Add padsp again (rhbz#2120847) - Fix license fields some more Resolves: DESKTOP-1151 - Fix license field Resolves: DESKTOP-1151 - Do not build daemon on RHEL Resolves: DESKTOP-1151 - convert license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 17.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Add padsp again (rhbz#2120847) - Fix license fields some more Resolves: DESKTOP-1151 - Fix license field Resolves: DESKTOP-1151 - Do not build daemon on RHEL Resolves: DESKTOP-1151 - convert license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 17.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Add padsp again (rhbz#2120847) - AlmaLinux changes: Enable Btrfs support - rhsm: Add Flatpak registry option for RHEL10 (bciconel) Resolves: RHEL-132652 Related: RHEL-132663 - Add support for new bootc kickstart command (ppolawsk) Resolves: RHEL-132612 Related: RHEL-58215 - pylint: Ignore files in .git (bcl) Related: RHEL-96217 - Add support for RDP (jkonecny) Resolves: RHEL-96217 - workflows: Switch to using ubuntu-latest (bcl) Related: RHEL-80086 - Do not remove "md" prefix from RAID names (vtrefny) Resolves: RHEL-80086 - Update %certificate section documentation (rvykydal) Related: RHEL-61435 - Make %certificate section option --dir mandatory. (rvykydal) Resolves: RHEL-76502 - Add support for inline certificates with `%certificate` section (k.koukiou) Resolves: RHEL-61435 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl) Related: RHEL-61426 - workflow: Use python 3.12.7 for testing (bcl) Related: RHEL-61426 - options: adjust to behavior change in upstream _parse_optional (awilliam) Resolves: RHEL-61426 - Mark the vnc command as deprecated on RHEL 10 (mkolman) Resolves: RHEL-41219 - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content - That way, accidentally unpackaged files within are reported as errors - %pyproject_save_files: Also save top level typing stub files (.pyi) - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires - Fixes: rhbz#2391290 - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir - Works around https://github.com/rpm-software-management/rpm/issues/3890 - Speed %pyproject_save_files up significantly - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields - That field is deprecated and should include importable module names, not distribution packages - Related: rhbz#2378463 - Fix handling of config_settings in %pyproject_buildrequires - Fix reverted conditional in %pyproject_buildrequires -t/-e Fedora version comparison - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42 - Requires tox-current-env >= 0.0.16 - Add the -M flag to %pyproject_save_files - The flag can be used to indicate no Python modules should be saved - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Deprecate the provisional -w flag for %pyproject_buildrequires - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - 6.10.0 Resolves: RHEL-109197 - 6.9.0 Resolves: RHEL-78527 - 6.8.0 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild (qt6) Resolves: RHEL-36430 - Update to 6.7.0 Resolves: RHEL-34661 - Update to snapshot of 6.7.0 Resolves: RHEL-31143 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - %python_extras_subpkg: Add -v option to specify the required version(-release) - This is useful when the extras are built from a different specfile (e.g. in EPEL for a RHEL base package) - Resolves: RHEL-117448 - Add brp script to modify .dist-info/INSTALLER file - Resolves: RHEL-86802 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - %python_extras_subpkg: Add option -a to include BuildArch: noarch - Bump release for June 2024 mass rebuild - %py3_test_envvars: Only set $PYTEST_XDIST_AUTO_NUM_WORKERS if not already set - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix python macro memoizing to account for changing %__python3 - %python_extras_subpkg: Add -v option to specify the required version(-release) - This is useful when the extras are built from a different specfile (e.g. in EPEL for a RHEL base package) - Resolves: RHEL-117448 - Add brp script to modify .dist-info/INSTALLER file - Resolves: RHEL-86802 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - %python_extras_subpkg: Add option -a to include BuildArch: noarch - Bump release for June 2024 mass rebuild - %py3_test_envvars: Only set $PYTEST_XDIST_AUTO_NUM_WORKERS if not already set - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix python macro memoizing to account for changing %__python3 - Security fix for CVE-2026-15308 Resolves: RHEL-193771 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Update to 3.12.12 - Security fix for CVE-2025-8291 Resolves: RHEL-128361 - Security fix for CVE-2025-8194 Resolves: RHEL-106329 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Update to 3.12.12 - Security fix for CVE-2025-8291 Resolves: RHEL-128361 - Security fix for CVE-2025-8194 Resolves: RHEL-106329 - Enable PAC and BTI hardware protections for aarch64 Resolves: RHEL-84196 - Update to Python 3.12.14 Resolves: RHEL-227203 - Security fix for CVE-2026-15308 Resolves: RHEL-193771 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Update to 3.12.12 - Security fix for CVE-2025-8291 Resolves: RHEL-128361 - Update to 3.12.15 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 - Security fix for CVE-2026-87910 Resolves: RHEL-274127 Resolves: RHEL-276240 - Update to Python 3.12.14 Resolves: RHEL-227203 - Security fix for CVE-2026-15308 Resolves: RHEL-193771 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 1.1.1 - Bump release for October 2024 mass rebuild: - Do not build "tz" subpackage - Bump release for June 2024 mass rebuild - [ci] Configure CI tests and gating.yaml - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.13.1 (Fixes RHBZ#2255427) - Update to 1.13.0 (Fixes RHBZ#2252423) - Update to 1.12.1 (Fixes RHBZ#2246418) - Update to 1.12.0 (Fixes RHBZ#2236554) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Help msuchy to count this package as already using SPDX license expression - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add Packit config - Update to 3.2.2 (RHBZ#2259943) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.2.1 (RHBZ#2175448) - Update to 3.2.0 (RHBZ#2175448) - Drop patches (merged upstream) - Apply patches from upstream regarding zsh tests - Update to 3.1.6 (RHBZ#2175448) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix POSTIN scriplet to not fail during upgrade Resolves: RHEL-128464 - ausearch-checkpoint race condition fix Resolves: RHEL-86896 - Adjust dependency between audit and audit-rules Resolves: RHEL-77141 - Add auditd.cron (5) man page for time-based log rotation description Resolves: RHEL-77141 - Remove HALT from space_left_action - Broadcast warning to users when auditd is about to halt Resolves: RHEL-73111 - Fix TTY hostname in log messages Resolves: RHEL-79476 - permtab: remove unsupported syscalls from rules Resolves: RHEL-59560 - Restore permission on audit.rules - Rebase to 4.0.3 - Pluginst must have .conf suffix, otherwise skipped Resolves: RHEL-58838 - ausearch checkpoint inode fix Resolves: RHEL-62333 - Audisp-filter: filter audit events and forward them to other plugins Resolves: RHEL-5199 - Log to console when system is halted due to audit not having enough storage Resolves: RHEL-990 - auditctl: remove misleasing error with --input file Resolves: RHEL-5200 - Remove ProtectKernelModules=true from service file Resolves: RHEL-59571 - Update syscall tables to reflect current kernel Resolves: RHEL-46969 - af_unix: Restore old behavior Resolves: RHEL-39955 - Add systemd-tempfiles.d for audit when root fs is read-only Resolves: RHEL-45311 - ausearch fix error reporting Resolves: RHEL-32808 - Resolve ordering cycle when using remote logging Resolves: RHEL-59561 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix 'install' calls in post scriptlet - Don't do "live" operations during rpm-ostree composes - Auditd is stopping during upgrade (bz 2259610) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to v0.31.1 - Update to version 0.27.2 and revise existing patches Resolves: RHEL-103640 - Update to 0.23.8 and add skip-testing-sha1.patch - add gating.yaml - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Rebuild with LLVM 21 (RHEL-108333) - Rebuild in a side-tag - Rebase to version 0.35.0 (RHEL-79002) - Fix bpf-ksnoop (RHEL-93852) - Fix bpf-javagc (RHEL-75531) - Fix bio* tools tracepoints (RHEL-99677) - Rebase to the latest version (RHEL-78921) - Rebuild with LLVM 20 (RHEL-81772) - Silence warning of trace tools (RHEL-68952) - Fix bpf-runqlen (RHEL-91190) - Fix sslsniff and sofdsnoop (RHEL-58348) - Fix slabratetop (RHEL-58810) - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947) - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529) - Fix multiples ppc64 tools (RHEL-58147) - Rebase to the latest version (RHEL-63886) - Fix gating tests of libbpf gating. - Explicitely disable blazesym support (RHEL-65850) - Fix LLVM 19 build (RHEL-64925) - Remove python3-pyelftools dependency (RHEL-60064) - AlmaLinux changes: Enable Btrfs support - Fix getting iSCSI firmware initiator name Resolves: RHEL-145882 - Fix luks save_passphrase for missing format context Resolves: RHEL-142610 - iSCSI: don't crash when LUN ID >= 256 Resolves: RHEL-122305 - Remove the safe_dbus module Related: RHEL-122305 - Temporarily reintroduce the safe_dbus module Related: RHEL-115005 - Update to blivet 3.13.0 upstream release Resolves: RHEL-115005 - Add a pre-wipe fixup function for LVM logical volumes Resolves: RHEL-93966 - tests: Change expected Stratis metadata size for stratisd 3.7.0 Resolves: RHEL-102299 - Tell LVM DBus to refresh it's internal status during reset Resolves: RHEL-93967 - Wipe end partition before creating it as well as the start Resolves: RHEL-93967 - AlmaLinux changes: Enable Btrfs support - lvm-dbus: Show better error for invalid LVM IDs Resolves: RHEL-123039 - Update to 3.4.0 Resolves: RHEL-114971 - Don't allow suid and dev set on fs resize Resolves: RHEL-96031 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82885 - nvme: Avoid element-type g-i annotations Resolves: RHEL-66117 - Update to 3.2.0 Resolves: RHEL-60272 Resolves: RHEL-50820 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-60061 - Backport libblockdev-smart plugin Resolves: RHEL-49675 - Update to release 1.6.8 - Resolves: RHEL-111710 - Update to release 1.6.5 - Resolves: RHEL-59511 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to release 1.6.3 - Resolves: RHEL-37489 - Rebuild for new gating configuration - Resolves: RHEL-37489 - Update to release 1.6.1. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to release 1.6.0. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough Resolves: RHEL-46310 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Added SPDX licenses found by ScanCode - Dropped redundant license tags from subpackages - Migrate group creation to sysusers - Bump release and rebuild - OCaml 5.1.1 + s390x code gen fix for Fedora 40 - Resolves: RHEL-133984 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Accept output_buffer_limit as an alias for max_output_length in Decompressor.process() for forward compatibility with upstream 1.2.0 - Resolves: RHEL-221151 - Resolves: RHEL-133984 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Add RHEL-only downstream patch to disable raid56 modes for now - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to version 6.12 - Resolves: rhbz#2329568 - Update to 6.11 Resolves: rhbz#2312879 - Update to version 6.10.1 - Resolves: rhbz#2305131 - Update to version 6.10 - Resolves: rhbz#2301782 - Update to 6.9.2 - Backport fix for Python 3.13 (rhbz#2245650) - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for Python 3.13 - Update to 6.9 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version - 2.10 (Vojtech Trefny) - Rename 'master' branch to 'main' (Vojtech Trefny) - remove dependency on python3-six and python2 crumbs (Alexandre Detiste) - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny) - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny) - dist: Fix release number in spec (Vojtech Trefny) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - New version - 2.9 (Vojtech Trefny) - build: Exit before AC_OUTPUT on error (Tomas Bzatek) - tests: fix locale tests on musl (triallax) - Update translation files (Weblate) - Translated using Weblate (Korean) (김인수) - ci: Manually prepare spec file for Packit (Vojtech Trefny) - Rebuilt for Python 3.12 - New version - 2.8 (Vojtech Trefny) - ci: Do not use release descriptions for Packit builds (Vojtech Trefny) - Do not hardcode pylint executable name in Makefile (Vojtech Trefny) - Remove unused test dependencies variables from Makefile (Vojtech Trefny) - docs: Remove information about Python 2 support (Vojtech Trefny) - Various docstring fixes (Vojtech Trefny) - Replace C++ style comments with C style (Vojtech Trefny) - Make use of error optional (Vojtech Trefny) - spec: Fix source archive URL (Vojtech Trefny) - ci: Add Packit automation for downstream builds (Vojtech Trefny) - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny) - ci: Use Packit for daily builds in Copr (Vojtech Trefny) - ci: Remove GitHub action for RPM builds (Vojtech Trefny) - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny) - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny) - ci: Update chroots for RPM builds (Vojtech Trefny) - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov) - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov) - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny) - Translated using Weblate (Georgian) (Temuri Doghonadze) - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny) - Added translation using Weblate (Georgian) (Temuri Doghonadze) - Update translation files (Weblate) - Translated using Weblate (Korean) (김인수) - ci: Update Fedora versions for RPM build tests (Vojtech Trefny) - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny) - ci: Update the csmock GitHub actions configuration (Vojtech Trefny) - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny) - Add a GitHub action for running csmock static analysis (Vojtech Trefny) - README: Remove the Travis CI badge (Vojtech Trefny) - Sync spec with downstream (Vojtech Trefny) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.25.1 - Update to 1.25.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.24.0 - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to version 0.3.17 - related: RHEL-121729 - Update to version 0.3.16 - Update to version 0.3.13 - resolves: RHEL-134736 - Update to version 0.3.12 - resolves: RHEL-121729 - Added channel binding support - resolves: RHEL-103400 - Bump release for October 2024 mass rebuild: - Update to version 0.3.9 - Add gating files from c9s - Bump release for June 2024 mass rebuild - Fix installing cepces-selinux - Require selinux package if selinux is enabled - Fix cepces-certmonger postinstall script - resolves: RHEL-215376 - Update to version 0.3.17 - related: RHEL-121729 - Update to version 0.3.16 - Update to version 0.3.13 - resolves: RHEL-134736 - Update to version 0.3.12 - resolves: RHEL-121729 - Added channel binding support - resolves: RHEL-103400 - Bump release for October 2024 mass rebuild: - RPMAUTOSPEC: unresolvable merge - Bump release for October 2024 mass rebuild: - Add gating.yaml file - Merge Fedora 41 updates - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add patch to fix CVE-2023-26112 - SPDX fix from Daniel P. Berrange - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Avoid pytest-cov dependency - 5.0.8 - Execute tests as upstream does - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix a file descriptor and a memory leak in an error path of cr_detect_compression() (RHEL-45645) - Bump release for June 2024 mass rebuild - 1.1.2 bump (RHEL-38831) - 1.1.1 bump (RHEL-38831) - Package Python examples - Update to 1.0.4 (RHEL-38831) - Extend the --compatibility flag to cover other defaults - mergerepo_c and modifyrepo_c now make "pretty" indented xml - Fix building due to bash-completion repackaging - Update to 1.0.3 - Set compression level 10 for zstd and zck - Introduce new --no-pretty option to reduce metadata size - Use gzip compression by default when --compatibility is specified - Default changelog limit restored for --compatibility - Use epoch-friendly sub-package interdependencies - Enable sqlite shared cache on connection level - Fix const-correctness with libxml2-2.12.0 - Allow specifying zck compression only - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Restore compatiblity with libxml2-2.12.0 - Update to 4.2 - Update to 4.1 - Fix VDSO compile error on s390x - Adapt patches to patches merged upstream - Fix running on aarch64 - Switch network locking backend default to nftables - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix test setup - Add riscv64 to ExclusiveArch - Handle rseq in generic compel code (checkpoint-restore/criu#3097) - Update to 4.2 - Update to 4.1 - Fix VDSO compile error on s390x - Adapt patches to patches merged upstream - Fix running on aarch64 - Switch network locking backend default to nftables - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - CI: Use dnf instead of yum to install CentOS packages (vponcova) - Documentation: Improve the installation instruction (vponcova) - Remove untracked files from the git repository interactively (vponcova) - UnixFD: Document the support for Unix file descriptors (vponcova) - Documentation: Clean up examples in the documentation (vponcova) - Documentation: Simplify the README.md file (vponcova) - Documentation: Fix bullet point lists (vponcova) - Documentation: Simplify the hostname example (vponcova) - CI: Run tests for all supported Python version (vponcova) - UnixFD: Handle DBus signals with Unix file descriptors (vponcova) - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova) - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova) - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova) - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova) - UnixFD: Process results of client calls in the low-level library (vponcova) - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova) - CI: Always pull the latest container image (vponcova) - CI: Disable the unhashable-member warning (vponcova) - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova) - UnixFD: Move the unit tests to a new file (vponcova) - UnixFD: Manage the testing bus on set up and tear down (vponcova) - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova) - UnixFD: Create a new testing DBus interface (vponcova) - UnixFD: Fix the indentation in unit tests (vponcova) - Add unit tests for variants with variant types (vponcova) - Simplify the code for replacing values of the UnixFD type (vponcova) - Add classes for unpacking and unwrapping a variant (vponcova) - Don't use pylint from pip on Fedora Rawhide (vponcova) - UnixFD: Rename a parameter to server_arguments (vponcova) - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova) - Raise TimeoutError if a DBus call times out (vponcova) - Fix pylint tests in CentOS Stream 8 (vponcova) - Fix the ENV instruction in Dockerfiles (vponcova) - Fix pylint issues (vponcova) - run forked tests using subprocess, instead of multiprocessing (wdouglass) - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass) - Add test case for method call only returning fd (jlyda) - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda) - fix some lint discovered errors (wdouglass) - seperate unixfd functionality, to better support systems that don't have them (wdouglass) - Remove note in documentation about unsupported Unix file descriptors (wdouglass) - Add a test for UnixFD transfer (wdouglass) - Allow UnixFDs to be replaced and passed into Gio (wdouglass) - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo) - Extend the .coveragerc file (vponcova) - Disable builds for Fedora ELN on commits (vponcova) - Test Debian with Travis (vponcova) - Test Ubuntu with Travis (vponcova) - Test CentOS Stream 9 with Travis (vponcova) - Use CentOS Stream 8 for testing (vponcova) - add remove dbus object function on bus and update tests (matthewcaswell) - properly measure coverage across multiprocess test cases (wdouglass) - Move handle typing tests into a new class (and a new file) (wdouglass) - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass) - Add functions for generating/consuming fdlists with variants (wdouglass) - Provide a language argument for the code blocks (seahawk1986) - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass) - Allow to run tests in a container (vponcova) - Add C0209 to the ignore list for pylint (tjoslin) - Use the latest distro in Travis CI (vponcova) - Always update the container (vponcova) - Document limitations of the DBus specification generator (vponcova) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - SPDX license format - Update to 0.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 0.8.3 - Revise gating.yaml so that the phantom tier0 test becomes real - Rebuild again to see if tier0 test continues to appear - Rebuild to get rid of phantom tier0 test - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Fix up testing plan tag - Fix up testing plan - Update to 0.4.1 - Checkout tests from HEAD revision - Security fix for CVE-2026-15308 Resolves: RHEL-193771 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Update to 3.12.12 - Security fix for CVE-2025-8291 Resolves: RHEL-128361 - Security fix for CVE-2025-8194 Resolves: RHEL-106329 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Update to 3.12.12 - Security fix for CVE-2025-8291 Resolves: RHEL-128361 - Security fix for CVE-2025-8194 Resolves: RHEL-106329 - Enable PAC and BTI hardware protections for aarch64 Resolves: RHEL-84196 - Update to Python 3.12.14 Resolves: RHEL-227203 - Security fix for CVE-2026-15308 Resolves: RHEL-193771 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Update to 3.12.12 - Security fix for CVE-2025-8291 Resolves: RHEL-128361 - Update to 3.12.15 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 - Security fix for CVE-2026-87910 Resolves: RHEL-274127 Resolves: RHEL-276240 - Update to Python 3.12.14 Resolves: RHEL-227203 - Security fix for CVE-2026-15308 Resolves: RHEL-193771 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s) - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot]) - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss) - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot]) - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿) - Ignore the file '/etc/ec2_version' (Pritam Kulkarni) - Add Debian Testing to the tests (#356) (Harshula Jayasuriya) - Ignore the file '/etc/board-release' (#353) (Pedro Lamas) - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko) - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER) - Update archlinux resource for tests (Saltaformajo) - Resolves rhbz#2255740 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Migrate from tox to pytest - migrate license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Document that local packages are not affected by versionlock (RHEL-94828) - reposync: Avoid multiple downloads of duplicate packages (RHEL-82849) - needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp (RHEL-35577) - needs-restarting: Add --exclude-services flag Resolves: RHEL-56137 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands) (RHEL-23706) - Enable leaves and show-leaves plugins (RHEL-44922) - Bump release for June 2024 mass rebuild - Fix symbolic links to packaged files (RHEL-40564) - Revert using systemd start time in needs-restarting (RHEL-35577) - Update to 4.7.0 (RHEL-38831) - docs: Documentation of needs-restarting boot time (RHEL-35577) - man: Prepare pages for dnf5 switch - spec: Prepare for switch of dnf5 in Rawhide - Document that local packages are not affected by versionlock (RHEL-94828) - reposync: Avoid multiple downloads of duplicate packages (RHEL-82849) - needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp (RHEL-35577) - needs-restarting: Add --exclude-services flag Resolves: RHEL-56137 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands) (RHEL-23706) - Enable leaves and show-leaves plugins (RHEL-44922) - Bump release for June 2024 mass rebuild - Fix symbolic links to packaged files (RHEL-40564) - Revert using systemd start time in needs-restarting (RHEL-35577) - Update to 4.7.0 (RHEL-38831) - docs: Documentation of needs-restarting boot time (RHEL-35577) - man: Prepare pages for dnf5 switch - spec: Prepare for switch of dnf5 in Rawhide - Document that local packages are not affected by versionlock (RHEL-94828) - reposync: Avoid multiple downloads of duplicate packages (RHEL-82849) - needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp (RHEL-35577) - needs-restarting: Add --exclude-services flag Resolves: RHEL-56137 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands) (RHEL-23706) - Enable leaves and show-leaves plugins (RHEL-44922) - Bump release for June 2024 mass rebuild - Fix symbolic links to packaged files (RHEL-40564) - Revert using systemd start time in needs-restarting (RHEL-35577) - Update to 4.7.0 (RHEL-38831) - docs: Documentation of needs-restarting boot time (RHEL-35577) - man: Prepare pages for dnf5 switch - spec: Prepare for switch of dnf5 in Rawhide - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.20.1 Resolves: rhbz#2207802 - Declare the license as an SPDX expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update BuildRequires to enchant2 - Check imports as a minimal test - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix TypeError: 'NoneType' object is not callable in magic.close() Resolves: RHEL-151423 - magic: Use the bcachefs-uuid for erofs Resolves: RHEL-76142 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Disable JIT if PCRE can't allocate executable memory - Fix warnings from service file Resolves: RHEL-116594 - Rebase to release 3.2.8 Resolves: RHEL-107671 - Rebuild for OpenSSL 3.5 Resolves: RHEL-88054 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Disable unsupported Perl script - Rebase to release 3.2.5 Resolves: RHEL-46784 - Bump release for June 2024 mass rebuild - Remove SQL helper script from package Resolves: RHEL-31745 - Remove Antora docs from package Resolves: RHEL-31184 - Fix abort when disconnecting from libei - Fix restarting the daemon state after a client has disconnected Resolves: RHEL-89455 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add gating.yaml - Version 0.0.11 - Fix requires in Python package - Add libei support - Bug fixing - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Move away from xvfb-run (done by nielsdg@redhat.com in Fedora) - Bump release for June 2024 mass rebuild - Use gtk3 in tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.46.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 3.44.1 - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - add support note to package descriptions (RHEL-113507) - update to 3.26.1 (RHEL-94234) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - fix icon path in desktop files (RHEL-34158) - replace gpsd-minimal conflicts with obsoletes (RHEL-33651) - fix annobin coverage (RHEL-33496) - add conflicts for gpsd-minimal (RHEL-33651) - drop compat subpackage (RHEL-33651) - fix dependencies for build without libs - rebuild - internalize scons (RHEL-14750) - add missing IPv6 support - add note about limited Red Hat support - drop unneeded API-compatibility patch - fix busy wait when reading from gpsd socket - fix some issues reported by coverity and shellcheck - fix command injection in gpsprof (CVE-2026-58459) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - add support note to package descriptions (RHEL-113507) - update to 3.26.1 (RHEL-94234) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix another command injection in gpsprof (CVE-2026-60122) - fix command injection in gpsprof (CVE-2026-58459) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - add support note to package descriptions (RHEL-113507) - update to 3.26.1 (RHEL-94234) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Undefine _include_frame_pointers for riscv64 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 3.0.3 - 3.0.2 - 3.0.1 - 3.0.0 - Update to version 3.0.0rc1 - Convert to pyproject macros - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Do not run modprobe in %post if the system is not running - Resolves: RHEL-78695 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix SPDX license identifiers - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - update to use tomcat9 Resolves: RHEL-78038 - fix FTBFS - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Rebase to PKI 11.6.0 - Resolves: RHEL-70108 - Resolves: RHEL-75585 - Resolves: RHEL-75546 - Resolves: RHEL-74371 - Resolves: RHEL-63015 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Rebase to PKI 11.7.0 - Resolves: RHEL-99832 - Fix build.sh to recognize AlmaLinux as RHEL-compatible - Update jackson bundled to 2.21.6 - Resolves: RHEL-259220 - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix - Update jackson bundled to 2.21.4 - Resolves: RHEL-188290 - Resolves: RHEL-190906 - Revert to tomcat 9 - Resolves: RHEL-155406 - Rebuilt for exception target - Rebase to PKI 11.9.0 - Resolves: RHEL-150666 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Resolves: RHEL-75980 - Rebase to PKI 11.9.0-beta1 - Resolves: RHEL-143038 - Resolves: RHEL-79552 - Rebase to PKI 11.7.1 - Resolves: RHEL-76752 - Resolves: RHEL-108293 - Resolves: RHEL-27181 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump version for re-tagging due to beta release. Resolves: RHEL-39531 - Bump version for release rebuild. Resolves: RHEL-39531 - Inital RHEL import Resolves: RHEL-39531 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - Bump release for June 2024 mass rebuild - Update to 3.1.10. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for Boost 1.83 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 3.1.9. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Upgrade to new release; fix license field; use TMT format tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-109895 Revert allow update of Kerberos master key - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service - Resolves: RHEL-245626 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-10.2.z] - Resolves: RHEL-245473 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI - Resolves: RHEL-240909 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-10.2.z] - Resolves: RHEL-240842 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-10.2.z] - Resolves: RHEL-240821 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240800 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-10.2.z] - Resolves: RHEL-240768 ipa-migrate tool is renaming host records & host info in automount information [rhel-10.2.z] - Resolves: RHEL-238676 ipa-migrate: require Replication Administrator privilege [rhel-10.2.z] - Resolves: RHEL-238673 ipa-epn: drop_privileges method is mixing uid and gid [rhel-10.2.z] - Resolves: RHEL-238526 ipa env: support only simple * wildcard [rhel-10.2.z] - Resolves: RHEL-238522 host-mod: handle the password attribute when set with --setattr userpassword= [rhel-10.2.z] - Resolves: RHEL-238518 ipa-otptoken-import hardening [rhel-10.2.z] - Resolves: RHEL-238516 Remove NetBIOS dependencies in Identity Manager [rhel-10.2.z] - Resolves: RHEL-238510 WebUI Hardening [rhel-10.2.z] - Resolves: RHEL-218853 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL - Resolves: RHEL-173375 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL10.2] - Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing - Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails - Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set - Resolves: RHEL-166864 Include latest fixes in python3-ipatests package - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - Resolves: RHEL-145855 Include latest fixes in python3-ipatests package - Resolves: RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - Resolves: RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system) - Resolves: RHEL-4895 ipa use systemd-sysusers - Resolves: RHEL-4823 Names of domains from a trusted forest should be compared case-insentive - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-113778 Command that retrieve and install new CA certificates - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package - Resolves: RHEL-119339 Memory leaks in IPA plugins - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2 - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier - Resolves: RHEL-119628 Include fixes in python3-ipatests - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine. - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114545 Rebase Samba to the latest 4.23.x release - Open-iSCSI upstream 2.1.11 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - iscsiuio threading fixes (iscsiuio 0.7.8.8) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - libiscsi build issues with new makefiles - Rebased to Open-iSCSI 2.1.9 - fix IQN name validation to prevent path traversal (CVE-2026-44943) - fix iscsiuio control-socket credential verification (CVE-2026-44944) - fix IQN name validation to prevent path traversal (CVE-2026-44943) - fix iscsiuio control-socket credential verification (CVE-2026-44944) - fix regression in fw and static node records - Open-iSCSI upstream 2.1.11 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 3.1.6 - Security fix for CVE-2025-27516 Resolves: RHEL-85058 - Update to 3.1.5 - Security fix for CVE-2024-56201 - Security fix for CVE-2024-56326 Resolves: RHEL-73095 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 3.1.4 Resolves: RHEL-36213 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.1.3 to fix CVE-2024-22195 - Declare the license as an SPDX expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.0.1. Fixes rhbz#2098349 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.33 - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use SPDX license string - Rebuilt for Python 3.12 - Remove broken gating tests - Update to 2.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Fix package name - Update tag for tests - Update to 0.15.2; use SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 0.15.2 - Add .fmf/version file - Update to 0.15.1; use SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix CVE-2026-39373: Memory exhaustion via crafted compressed JWE tokens - Bump release for October 2024 mass rebuild: - Added gating.yaml and tests for python-jwcrypto - Bump release for June 2024 mass rebuild - Rebase to version 1.5.6 - New upstream version (1.1.0) - Use DNS discovery for declared realms only (CVE-2025-59088) Resolves: RHEL-113652 - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089) Resolves: RHEL-113656 - Log KDC timeout only once per request Resolves: RHEL-68354 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to version 1.3 - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Resolves: rhbz#2115262 keycloak-httpd-client-install missing dependency to python-lxml - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420) [RHEL-168795] - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Implement verifier graceful shutdown - Fix verifier race condition on agent delete - Remove unbounded functools.cache from latest_attestation - Add patches to fix DB connection leaks - Updating for Keylime release v7.14.1 - Change ownership of /usr/share/keylime/tpm_cert_store to root - Added manpages for keylime services and the tenant - Added support for ECC attestation - Fixed man page RST formatting for rst2man compatibility - Add support for ECC attestation - Properly fix malformed TPM certificates workaround - Avoid opening /dev/stdout when printing - AlmaLinux changes: Enable Btrfs support - rhsm: Add Flatpak registry option for RHEL10 (bciconel) Resolves: RHEL-132652 Related: RHEL-132663 - Add support for new bootc kickstart command (ppolawsk) Resolves: RHEL-132612 Related: RHEL-58215 - pylint: Ignore files in .git (bcl) Related: RHEL-96217 - Add support for RDP (jkonecny) Resolves: RHEL-96217 - workflows: Switch to using ubuntu-latest (bcl) Related: RHEL-80086 - Do not remove "md" prefix from RAID names (vtrefny) Resolves: RHEL-80086 - Update %certificate section documentation (rvykydal) Related: RHEL-61435 - Make %certificate section option --dir mandatory. (rvykydal) Resolves: RHEL-76502 - Add support for inline certificates with `%certificate` section (k.koukiou) Resolves: RHEL-61435 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl) Related: RHEL-61426 - workflow: Use python 3.12.7 for testing (bcl) Related: RHEL-61426 - options: adjust to behavior change in upstream _parse_optional (awilliam) Resolves: RHEL-61426 - Mark the vnc command as deprecated on RHEL 10 (mkolman) Resolves: RHEL-41219 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - adding gating.yaml configuration - Update to 0.0.65 - Add wuu, tok, glk, gbm, ssy - Remove aa_ER.UTF-8@saaho - Add kv_RU.UTF-8, chr_RU.UTF-8 - Add EU, EZ - Improve README and Makefile (Resolves: https://github.com/mike- fabian/langtable/issues/19) - Add more translations from CLDR - Get translation changes from CLDR - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.0.64 - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts} (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159) - Update to 0.0.63 - Add more translations from CLDR - Get translation changes from CLDR - Japanese: prefer anthy over kkc (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17) - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones() (Resolves: https://github.com/mike-fabian/langtable/issues/18) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rename from lark-parser to lark - Update to 1.1.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 3.4.5 version - Update the spec to use pyproject macros - Resolves: RHEL-129936 - Update to 3.4.5 version - Convert STI tests to FMF - Bump release for October 2024 mass rebuild: - Fix gating YAML's extension - Add gating for RHEL 10 - RHEL: Instead of not running the tests, skip tests requiring openldap- servers - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-10.2.z] - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-10.2.z] - Resolves: RHEL-232863 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-10.2.z] - Resolves: RHEL-244470 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-10.2.z] - Resolves: RHEL-245372 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-10.2.z] - Resolves: RHEL-247859 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-10.2.z] - Resolves: RHEL-248770 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-10.2.z] - Bump version to 3.2.0-9 - Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-10.2.z] - Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-10.2.z] - Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre- authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-10.2.z] - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN cache is disabled. - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral - Resolves: RHEL-92054 - Memory leak in roles_cache_create_object_from_entry [rhel-10] - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10] - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with world readable permission - Resolves: RHEL-107035 - CWE-532 Created user password hash available to see in audit log - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password changed by administrator - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS access and error logs - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] - Resolves: RHEL-5117 - ns-slapd crash in dbmdb_import_prepare_worker_entry() - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's log msg info - Resolves: RHEL-35241 - ns-slapd crashes in referral mode - Resolves: RHEL-61327 - Incomplete messages about replication in the errors log. - Resolves: RHEL-61353 - dbscan on replication changelog does not display MOD_TYPE - Resolves: RHEL-62874 - dsidm: issue when renaming users - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached inactivity limit fails with error - Resolves: RHEL-67003 - dsconf backend replication monitor fails if replica id starts with 0 - Resolves: RHEL-67006 - dsconf utility should let you configure the "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug- in - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole filter rewriter. - Resolves: RHEL-67022 - Password modify extended operation should skip password policy checks when executed by root DN - Resolves: RHEL-70117 - Unify how group description can be added to a new group in WebUI and CLU - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in Directory Server - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or a number, not 'NoneType' - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree- rename-switch" from DS-12 - Resolves: RHEL-79080 - Json option does not work with "dsidm account get- by-dn" command - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS access and error logs - Resolves: RHEL-80253 - RHDS hangs when having online backup running together with automember_rebuild task executing - Resolves: RHEL-80497 - Can't rename users member of automember rule [rhel-10] - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are provided - Resolves: RHEL-83850 - mdb database statistics don't work - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role create-nested" - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role create-filtered" - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" - Resolves: RHEL-86314 - dsidm failing with error "argument must be a string or a number" - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit, service and posixgroup - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j option - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper deletion message, but role is still present - Resolves: RHEL-86785 - dscontainer: support loading custom schema - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp 00007fed321fe100 error 6 in liblmdb.so.0.0.0 - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if replicas are busy [rhel-10] - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] - Resolves: RHEL-95761 - Improve error message when bulk import connection is closed - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or directory: '/usr/sbin/dsctl' - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN cache is disabled. - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral - Resolves: RHEL-92054 - Memory leak in roles_cache_create_object_from_entry [rhel-10] - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10] - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with world readable permission - Resolves: RHEL-107035 - CWE-532 Created user password hash available to see in audit log - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password changed by administrator - Bump version to 3.2.0-9 - Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-10.2.z] - Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-10.2.z] - Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre- authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-10.2.z] - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-10.2.z] - Bump version to 3.2.0-7 - Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user [rhel-10.2.z] - Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z] - Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent search operations [rhel-10.2.z] - Resolves: RHEL-170363 - access log - suspicious wtime optime negative and large values in internal op [rhel-10.2.z] - Resolves: RHEL-170478 - An online reinitialization with LMDB is terminating the receiving server [rhel-10.2.z] - Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-10.2.z] - Resolves: RHEL-170515 - Possible memory leak when using the Retro Changelog plugin. [rhel-10.2.z] - Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server threads [rhel-10.2.z] - Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-10.2] - Resolves: RHEL-180718 - Online export is failing when using the option "-s" [rhel-10.2.z] - Resolves: RHEL-183897 - Server shutdown during online reindex may lead to data loss [rhel-10.2.z] - Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected keyword argument 'input_file' [rhel-10.2.z] - Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z] - Resolves: RHEL-183900 - Substring index produces empty results and can crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured [rhel-10.2.z] - Bump version to 3.2.0-6 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Bump version to 3.2.0-5 - Bump version to 3.2.0-4 - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming. - Resolves: RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-10.2] - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange() - Bump version to 3.2.0-3 - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all indexes instead of selected ones - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list - Resolves: RHEL-121981 - Setting password history count to 0 does not flush history - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf plugin - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication - Update to 3.2.0 - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto- tune should adapt its tuning - Resolves: RHEL-58682 - [RFE] modify entry cache eviction strategy to allow large groups to stay in the cache - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent across different tools - Resolves: RHEL-83274 - Replication online reinitialization of a large database gets stalled. - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option. - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. - Resolves: RHEL-96196 - Duplicate/double local password policy entry display from redhat directory server webconsole - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the conflicts at once instead of deleting each conflict one after the other - Resolves: RHEL-105578 - IPA health check up script shows time skew is over 24 hours - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used. - Resolves: RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot be added. - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does not exist - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific groups - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF - Resolves: RHEL-115179 - Several password related attributes are not replicating from the Replicas to the Masters - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory corruption - Resolves: RHEL-116060 - Fix paged result search locking - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth - Resolves: RHEL-117140 - Changelog trimming - add number of scanned entries to the log - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task. - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations in the access logs - Resolves: RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue - Resolves: RHEL-123663 - Online initialization of consumers fails with error -23 - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected - Resolves: RHEL-124694 - Access logs are not getting deleted as configured. - Resolves: RHEL-126535 - memory corruption in alias entry plugin - Resolves: RHEL-128906 - Scalability issue of replication online initialization with large database - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when replicating after importing data from ldif files - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11 - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds- base-2.6.1-12 - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x - Resolves: RHEL-101727 - The numSubordinates value is not matching the number of direct children. - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules - Resolves: RHEL-111224 - Error showing local password policy on web UI - Resolves: RHEL-112675 - Statistics about index lookup report a wrong duration - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv - Resolves: RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration: mark license as SPDX compatible - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 2.1.3 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.1 - Update to 2.02 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Enable building for ppc64le - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Update to libguestfs-1.58.1-6 - daemon/listfs.ml: ignore CHS geometry error from parted (Veritas/Sun) - daemon: allow base64:/text: prefixes on Key parameters (binary LUKS keys) - daemon: move read_whole_file to common/utils and rewrite luks_* APIs in OCaml - Update common submodule - Apply patches with %autosetup -S git (a patch now adds binary test data) - Enable building for ppc64le - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Rebase to libguestfs 1.52.2 (along the stable branch) - Remove dependency on syslinux packages resolves: RHEL-50565 - Fix parsing in part_get_gpt_attributes resolves: RHEL-45465 - Bump release for June 2024 mass rebuild - Enable building for ppc64le - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for Aug 2024 java mass rebuild - Enable building for ppc64le - Add setfiles optional excludes parameter to libguestfs resolves: RHEL-239808 - Ignore RHEL 7 AGFL inconsistency in xfs_repair resolves: RHEL-192920 - Use bind mount to overwrite /etc/resolv.conf resolves: RHEL-192946 - Fix binary LUKS keys resolves: RHEL-174519 - Use git to apply patches, since there is an unsupported binary patch - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Rebase to libguestfs 1.58.1 resolves: RHEL-111240 - Synchronize spec file with Fedora - Add new libguestfs ntfs_chmod API resolves: RHEL-113833 - Use setfiles -A option if available to reduce memory usage resolves: RHEL-114292 - Add -cpu max when testing for KVM via QMP resolves: RHEL-121076 - Require passt resolves: RHEL-122315 - Add AV and GPOs to inspection info resolves: RHEL-125846 - Add new xfs_info2 API resolves: RHEL-143673 - Rebase to libguestfs 1.56.1 resolves: RHEL-81733 - Include host kernel information in libguestfs debugging output resolves: RHEL-83026 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87622 - Remove dependencies on oUnit, flex, bison, file-devel - Remove zfs-fuse (not used in RHEL) - Fix gating test - Fix inspection with duplicated root mountpoint resolves: RHEL-90170 - Add btrfs-scrub-full API resolves: RHEL-91936 - Add e2fsck forceno flag resolves: RHEL-92599 - Capture and raise qemu-img stderr resolves: RHEL-92239 - Ignore btrfs snapshots of roots resolves: RHEL-93109 - Add /etc/fstab, lsblk and blkid to verbose output resolves: RHEL-106490 - Fix conversion of SLES15 with encrypted btrfs filesystem resolves: RHEL-93584 - Add guestfs_setfiles API resolves: RHEL-108832 - Ignore blank disks in Windows drive mapping resolves: RHEL-109258 - Rebase to libguestfs 1.54.0 resolves: RHEL-56810 - Fix osinfo for Windows Server 2025 resolves: RHEL-62989 - Replace Jansson with json-c resolves: RHEL-65293 - Remove squashfs-tools on RHEL resolves: RHEL-68937 - Fix perl-Sys-Guestfs debuginfo resolves: RHEL-68973 - Synchronize patches with RHEL 9.5 resolves: RHEL-56325 - appliance/init: Don't set impossible "noop" disk scheduler resolves: RHEL-56157 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild without STI tests - Fix building with glib2-doc 2.80.1 (RHEL-45188) - Bump release for June 2024 mass rebuild - Fix building with glib2-doc 2.79.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuild for rpm-4.18.90 - use sysuser setting for uuidd - Fix heap buffer overread in setpwnam() [CVE-2025-14104] - libfdisk: fix off-by-one in maximum last sector calculation - mount: improve --all documentation - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical - libblkid: use snprintf() instead of sprintf() - lscpu: Add NVIDIA Olympus arm64 core - libfdisk: improve collision reporting - libfdisk: (dos) ignore incomplete EBR for non-wholedisk - wall: always use utmp as fallback - lscpu: update table with ARM IDs - coresched: backport new tool to RHEL-10 - agetty: fix stdin conversion to tty name - blkid: allow up to 64k erofs block sizes - more(1): make sure we have data on stderr - Rebase to libnbd 1.24.1 resolves: RHEL-111243 - Synch spec file with Fedora - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution resolves: RHEL-129296 - Implement Post-Quantum Cryptography (PQC) resolves: RHEL-101267 - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-1417 - alt-name: Remove alt-names when interface marked as absent. RHEL-126481 - hsr: Automatically disable IP on hsr port. RHEL-100774 - hsr: add support for configuring "interlink" property. RHEL-100766 - Support referring alternative-name as port/parent/next-hop-interface. RHEL-126508 - Support referring interface name using its alternative name. RHEL-126510 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158) - Support setting protocol version of HSR/PRP. (RHEL-100763) - Fix inconsistent interface order. (RHEL-130157) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-119046 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-125548 - Align with libreswan default values. RHEL-26350 - Support rightca ipsec option. RHEL-114237 - Fix error when changing existing HSR interface. RHEL-100773 - Upgrade to 2.2.54 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121418 - Upgrade to 2.2.52 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. - Introduce state: ignore for route. - Support PCI address matching in gen_conf. - Support MacSec interface in gen_conf. - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135 - Fix setting DNS only with search or option. RHEL-102333 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-37922 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415 - Support matching by PCI adress. RHEL-80116 - Apply dispatch changes first. RHEL-94840 - Fix SRIOV VF reference. RHEL-91588 - Fix deleting with `fail_over_mac` bond. RHEL-102600 - Upgrade to 2.2.46 - Store DNS to both iface and global DNS. RHEL-91250 - Support nmpolicy against down iface. RHEL-86240 - Support removal VLAN connection with empty ifname. RHEL-92916 - Upgrade to 2.2.45 - Fix stuck on `nmstatectl show`. RHEL-93154 - Fix infiniband devices - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170697 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151937 - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-1417 - alt-name: Remove alt-names when interface marked as absent. RHEL-126481 - hsr: Automatically disable IP on hsr port. RHEL-100774 - hsr: add support for configuring "interlink" property. RHEL-100766 - Support referring alternative-name as port/parent/next-hop-interface. RHEL-126508 - Support referring interface name using its alternative name. RHEL-126510 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158) - Support setting protocol version of HSR/PRP. (RHEL-100763) - Fix inconsistent interface order. (RHEL-130157) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-119046 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-125548 - Align with libreswan default values. RHEL-26350 - Support rightca ipsec option. RHEL-114237 - Fix error when changing existing HSR interface. RHEL-100773 - Upgrade to 2.2.54 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121418 - Upgrade to 2.2.52 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. - Introduce state: ignore for route. - Support PCI address matching in gen_conf. - Support MacSec interface in gen_conf. - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135 - Fix setting DNS only with search or option. RHEL-102333 - Ignore IP addresses with non-kernel IFA_PROTO RHEL-253627 - Fix infiniband devices - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170697 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151937 - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-1417 - alt-name: Remove alt-names when interface marked as absent. RHEL-126481 - hsr: Automatically disable IP on hsr port. RHEL-100774 - hsr: add support for configuring "interlink" property. RHEL-100766 - Support referring alternative-name as port/parent/next-hop-interface. RHEL-126508 - Support referring interface name using its alternative name. RHEL-126510 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158) - Support setting protocol version of HSR/PRP. (RHEL-100763) - Fix inconsistent interface order. (RHEL-130157) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-119046 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-125548 - Align with libreswan default values. RHEL-26350 - Support rightca ipsec option. RHEL-114237 - Fix error when changing existing HSR interface. RHEL-100773 - Upgrade to 2.2.54 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121418 - Upgrade to 2.2.52 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. - Introduce state: ignore for route. - Support PCI address matching in gen_conf. - Support MacSec interface in gen_conf. - Fix linked list corruption (RHEL-156539) - Fix gating tests for RHEL-127740 - Rebase to version 1.16.1 (RHEL-127740) - Add a fix for a NULL pointer dereference regression - bump version because the side-tag didn't propagate - Update to version 1.15 (RHEL-113070) - Update to version 1.13 (RHEL-90418) - Update to the latest version v1.11.1 (RHEL-68304) - Update to version 1.10 (RHEL-63282) - Fix RHEL-37611 - SELinux userspace 3.10 release - restorecon: Add option to count relabeled files (RHEL-144056) - Rebuild to accomodate changes in swig (RHEL-118812) - Ignore files removed during relabeling (RHEL-110181) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - Prioritize local literal fcontext definitions (rhbz#2360183) - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - libselinux/utils: drop reachable assert in sefcontext_compile - SELinux userspace 3.10 release - Rebuild to accommodate changes in swig (RHEL-138405) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - SELinux userspace 3.8.1 release - improve performance of semanage store rebuild (RHEL-81707) - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.8-rc1 release - direct_api: INTEGER_OVERFLOW read_len = read() (RHEL-35997) - Bump release for October 2024 mass rebuild (RHEL-64018) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove smis plugin sub package - Add gating.yaml - Upgrade to 1.10.1 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - virDomainSaveParams: Add missing typed parameter conversion hints (RHEL-142127) - Rebased to libvirt-python-11.10.0 (RHEL-104241) - Rebased to libvirt-python-11.9.0 (RHEL-104241) - Rebased to libvirt-python-11.8.0 (RHEL-104241) - Rebased to libvirt-python-11.5.0 (RHEL-71663) - Rebased to libvirt-python-11.3.0 (RHEL-71663) - Rebased to libvirt-python-11.2.0 (RHEL-71663) - Rebased to libvirt-python-11.1.0 (RHEL-71663) - Rebased to libvirt-python-10.10.0 (RHEL-50578) - Rebased to libvirt-python-10.9.0 (RHEL-50578) - RPMAUTOSPEC: unresolvable merge - RPMAUTOSPEC: unresolvable merge - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Hardlink, rather than symlink, duplicate table files - Fix RHEL build after RPATH removal - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.28.0 - Install internal.h for MuseScore - Drop ancient obsoletes - Build the python package with dist-info - Add tables subpackage for the noarch data - Complete and correct SPDX migration - Remove need for chrpath - Minor spec file cleanups - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 3.25.0 - Bump release for October 2024 mass rebuild: - Convert the gating configuration to RHEL - Bump release for June 2024 mass rebuild - Update to 5.2.1 (rhbz#2272165) - Revert "Reduce the type safety as a workaround for build failures in Fedora 40+" - The workaround has been moved to Cython - Fix test_elementtree with Expat 2.6.0 - Fixes: rhbz#2264859 - Reduce the type safety as a workaround for build failures in Fedora 40+ - Fixes: rhbz#2261034 - Fixes: rhbz#2256232 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 5.1.0 (rhbz#2256232) - Update to 4.9.4 (rhbz#2255267) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix SDPX license - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.1.3 - Fixes: rhbz#2211988 - Rebuilt for Python 3.12 - Update to 2.1.2 - Fixes: rhbz#2161767 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Make libreport optional (mkolman) Resolves: RHEL-35676 - SPDX compatible License: line (mkolman) - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com) - Improve formatting and data in setup.py (vslavik) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Make libreport optional (mkolman) Resolves: RHEL-35676 - SPDX compatible License: line (mkolman) - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com) - Improve formatting and data in setup.py (vslavik) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - fix LD_RUN_PATH handling Resolves: RHEL-48718 - Bump release for June 2024 mass rebuild - update to 5.0.0 (#2250905) - remove redundant _httpd_ macro definitions - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use the modern way of filtering Provides not to interfere with modern Python RPM generators - Rebuilt for Python 3.12 - SPDX migration - fix creation of /var/lib/net-snmp in image mode (RHEL-132654) - fix out-of-bound access issue (RHEL-137498) - fix use after free issue (RHEL-121405) - Enable PQC in net-snmp (RHEL-93087) - Fix inverted use of -n in snmptrapd_log.c (RHEL-110514) - Resolves: RHEL-81121 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - update license tag and remove tests folder - Fix licensing issue in source code (RHEL-46905) - Add gating.yaml file - Remove subpackage python-netaddr-shell Resolves: RHEL-74187 - New upstream release 1.3.0 Resolves: RHEL-74187 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Conditionalize docs - New upstream release 0.10.1 (rhbz#2256342) - Remove patch for Python 3.13 compatibility (merged upstream in 0.10.0) - Add new depencency on furo - Include missing THANKS file (https://github.com/netaddr/netaddr/pull/345) - Add patch for Python 3.13 compatibility (rhbz#2246093) - New upstream release 0.9.0 (rhbz#2239532) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Test with netlib - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Remove the upper bound on the version of python-nbconvert (fix RHBZ#2256372) - Version 3.2.1 - Bring back the test patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bootstrap for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 0.52.24 - convert license tag to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - update to 0.52.23 - update to 0.52.22 - fix ppc64le test failures (RHEL-77878) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - remove redundant patchelf dependency (RHEL-36334) - Unbundle libdivide in Fedora - Let libdivide use vector instructions when possible - 1.26.4 - Fix tests for IEEE long double on PPC (RHEL-145970) - fix ppc64le test failures (RHEL-77878) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - fix ppc64le test failures (RHEL-77878) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - remove redundant patchelf dependency (RHEL-36334) - Unbundle libdivide in Fedora - Let libdivide use vector instructions when possible - 1.26.4 - Fix tests for IEEE long double on PPC (RHEL-145970) - fix ppc64le test failures (RHEL-77878) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating tests - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.2.2 for CVE-2022-36087 - Fix FTBFS with Python 3.12 (rhbz#2192914) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Bump release for package rebuild - New upstream release - New upstream release - New upstream release - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix crash with pam_lastlog Resolves: RHEL-53984 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - Fix writing of v3 archive timestamps on s390x (RHEL-69722) - Rebuild with selinux-policy-40.13.23-1 - Fix CVE-2026-16530: __pmLogLoadInDom OOB pointer dereference (RHEL-213746) - Fix CVE-2026-16531: pmproxy logger servlet path traversal (RHEL-213756) - Backport remaining PCP security hardening fixes from private-pcp - pmieconf and pmlogmv command injection hardening (CWE-78) - libpcp PDU decode OOB read and overflow guards (CWE-125/190/195) - timezone and zoneinfo string validation - pmdaroot peer credential verification (CWE-403) - pmproxy REST CERT_REQD enforcement and logger servlet authentication - Fix CVE-2026-16524: linux_sockets PMDA command injection (RHEL-213659) - Fix CVE-2026-16526: FD_CLOEXEC privilege escalation via pmdaroot (RHEL-213695) - Fix CVE-2026-16527: pmproxy unauthenticated /store access (RHEL-213721) - Fix CVE-2026-16529: __pmGetPDU signed integer overflow DoS (RHEL-213732) - Update selinux polices for rocestat and nvidia pmdas (RHEL-132402, RHEL-134388, RHEL-133519) - Fix pcp2openmetrics archive metric querying (RHEL-114006) - Update to latest stable version of PCP (RHEL-124897) - Make pcp-zeroconf start enabled services once again (RHEL-93182) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport some more fixes to the OpenMetrics PMDA - Fix a multilib regression in PCP header files - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-88201) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83468) - rebase to release 2024.8.26 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Drop obsolete python-future dependency - Rebuilt for Python 3.12 - Rebuild for https://pagure.io/releng/issue/11327 - bump to version 2023.2.7 - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Bump release for June 2024 mass rebuild - Migrate to SPDX license identifier - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Bump epoch for the virtual pip Provide, for this package to take precedence over python3.14-pip - Change the test source location - rpminspect: Disable the unicode inspection - Bump release for October 2024 mass rebuild: - Verify no unwanted files are present in the package - CI: Adjust tests for c10s - Add gating.yaml - Bump release for June 2024 mass rebuild - update to https://github.com/containers/podman-py/releases/tag/v5.7.0 - Related: RHEL-122178 - update to https://github.com/containers/podman-py/releases/tag/v5.6.0 - Related: RHEL-111917 - update to https://github.com/containers/podman-py/releases/tag/v5.5.0 - Related: RHEL-80817 - update to https://github.com/containers/podman-py/releases/tag/v5.4.0.1 - Resolves: RHEL-81950 - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - SELinux userspace 3.8-rc1 release - Several sandbox and seunshare security improvements - SELinux userspace 3.10 release - Make `rpm` a weak dependency (bz#2338647) - restorecon: Add option to count relabeled files (RHEL-94827) - semanage: Reset active value when deleting boolean customizations (RHEL-111421) - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505) - SELinux userspace 3.9 release - SELinux userspace 3.9-rc2 release - sepolicy: Fix detection of writeable locations - SELinux userspace 3.8 release - SELinux userspace 3.8-rc3 release - Drop the python-hatch-vcs dependency - Update to upstream 3.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add x86_64_v2 to RPM_ARCHES - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release - New upstream release 1.37 - New upstream release 1.36 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.0.41 (rhbz#2219586) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 3.0.38, resolves rhbz#2173899 - Update to 3.0.37, resolves rhbz#2172242 - Update to upstream snapshot for Python 3.12 compatibility, resolves rhbz#2165570 - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Disable tests during build that are flaky - Rebuilt for tests directory - Copy patch from c9s to make emacs dependency optional Resolves: RHEL-93236 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - copy gating.yaml from c9s - Bump release for June 2024 mass rebuild - Skip test_emulate_multi_cpu on riscv64 too Resolves: RHEL-93392 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Skip unreliable test_sensors_temperatures - Don't treat sockets as paths in tests - Bump release for June 2024 mass rebuild - Skip unreliable multi-cpu test on ppc64le - Update to 5.9.8 - Fixes: rhbz#2244271 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Declare the license as an SPDX expression - Update to 5.9.5 rhbz#2135931 - Skip unreliable test rhbz#2169395 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix URL and Source URL - Rebase to the latest upstream version - Update license and use SPDX formula according to fedora-license-data - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebase to the latest upstream version - Resolves rhbz#2171683 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add cracklib dependency (RHEL-39973) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Use setuptools instead of distutils to build this package - Resolves: rhbz#2165572 - Strengthen cracklib-dicts dependency to Recommends (#2158891) - Update to 0.6.2 - Update modules to 0.4.2 Resolves: RHEL-148142 - Update to 0.6.1 - Update modules to 0.4.1 Resolves: RHEL-67667 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix CVE-2026-59886: prevent overflow in Real.__float__() when converting ASN.1 Real values with large exponents Resolves: RHEL-217904 - Update to 0.6.2 - Update modules to 0.4.2 Resolves: RHEL-148142 - Update to 0.6.1 - Update modules to 0.4.1 Resolves: RHEL-67667 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.6.2 - Update modules to 0.4.2 Resolves: RHEL-148142 - Update to 0.6.1 - Update modules to 0.4.1 Resolves: RHEL-67667 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix CVE-2026-59886: prevent overflow in Real.__float__() when converting ASN.1 Real values with large exponents Resolves: RHEL-217904 - Update to 0.6.2 - Update modules to 0.4.2 Resolves: RHEL-148142 - Update to 0.6.1 - Update modules to 0.4.1 Resolves: RHEL-67667 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.46.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Drop BR on dbus-glib as the project is using plain dbus - Remove obsolete gtk2 BuildRequires - Use SPDX for license field - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release version and rebuild for 10.2 Resolves: RHEL-75940 - Update to latest upstream version 2.1.1 Resolves: RHEL-75940 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebase to the newest version (Related: rhbz#2262845) - Update license tag to the SPDX format (MIT-0) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to the newest version (Related: rhbz#2244039) - Rebase to the newest version, test the beta (Related: rhbz#2235401) - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream - Move /usr/pyodbc.pyi to /usr/lib64/python3.X/site-packages/pyodbc.pyi as originally intended - Rebase to the newest version, test the beta (rhbz#2235122) - This release drops Python 2 and adds Python 3.12 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Upgrade to pyparted-3.13.0 - Rebuilt for Python 3.12 - Use non-deprecated syntax for the %patch macros - Rebuilt for Python 3.12 - 6.10.0 Resolves: RHEL-109197 - 6.9.0 Resolves: RHEL-78527 - 6.8.0 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild (qt6) Resolves: RHEL-36430 - Update to 6.7.0 Resolves: RHEL-34661 - Update to snapshot of 6.7.0 Resolves: RHEL-31143 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.0 Resolves: RHEL-109197 - 6.9.0 Resolves: RHEL-78527 - 6.8.0 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild (qt6) Resolves: RHEL-36430 - Update to 6.7.0 Resolves: RHEL-34661 - Update to snapshot of 6.7.0 Resolves: RHEL-31143 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.0 Resolves: RHEL-109197 - 6.9.0 Resolves: RHEL-78527 - 6.8.0 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild (qt6) Resolves: RHEL-36430 - Update to 6.7.0 Resolves: RHEL-34661 - Update to snapshot of 6.7.0 Resolves: RHEL-31143 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 13.9.1 Resolves: RHEL-73680 - 13.8.0 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 13.6.0 - Migrate License: tag to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Backport patches needed for compatibility with Python 3.12 - Symlink miniterm.py for backward compatibility - Resolves: RHEL-68967 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update dependencies to libusb1 - Rebuilt for Python 3.12 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebase to upstream release 61.0 - Fix pyverbs tests - Rebase to upstream release v57.0 - Properly check %{valgrind_arches} - Fix data corruption in bnxt_re - Update to upstream release v54.0 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Update to upstream release v51.0 - Add rhel10 gating configuration and tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Added gating.yaml and tests for python-qrcode - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - Make pypng requirement optional - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Migrate from tox to pytest, avoid unwanted deps in RHEL builds - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Avoid tox dependency - Update to version 2.0.0 - Apply current python packaging recommendations to the spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Migrate to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Remove use of the cgi module - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - New upstream release (1.4.0) Resolves: RHEL-103408 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating configuration - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Simplify build dependencies - Update to 1.0.1. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Avoid DeprecationWarning: Implicit None on return values is deprecated and will raise KeyErrors - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix URL tag - Declare the license via a complex SPDX expression rather than "effective license" - Generate provides for /app-installed flatpak builds - Avoid needless pkg_resources import in pythonbundles.py - Ignore environment markers in pythonbundles.py - %python_extras_subpkg: Add -v option to specify the required version(-release) - This is useful when the extras are built from a different specfile (e.g. in EPEL for a RHEL base package) - Resolves: RHEL-117448 - Add brp script to modify .dist-info/INSTALLER file - Resolves: RHEL-86802 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - %python_extras_subpkg: Add option -a to include BuildArch: noarch - Bump release for June 2024 mass rebuild - %py3_test_envvars: Only set $PYTEST_XDIST_AUTO_NUM_WORKERS if not already set - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix python macro memoizing to account for changing %__python3 - Rebuild for gating test changes - Add gating.yaml - Fix RHEL-64990 (dbroot fix and disable unsupported fabrics) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix kmod import - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.18.5 - Update to 0.18.2 (close RHBZ#2245968) - Update to 0.18.1 (close RHBZ#2241174) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 0.17.32 (close RHBZ#2210057) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update fix-typecasts-s390x.patch for GCC 14 compatibility (#2042422) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 0.2.7 - Confirm License is SPDX MIT - Reduce macro indirection, etc. - Drop unused manual runtime dependency on setuptools - Add a note about the circular dependency with ruamel.yaml - Stop numbering sources and patches - Update URL (close RHBZ#1840610) - Add an import-only “smoke test” - Properly handle libyaml bundling - Port to pyproject-rpm-macros (“new Python guidelines”) - Add a link to the upstream issue for the Cython workaround - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - scapy-2.6.1-1.el10 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Enable gating test on RHEL10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - cosmetics - Use SDPX license IDs - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Disable docs by default in RHEL builds - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Waive annocheck results: --skip-implicit-values - Resolves: RHEL-33519 - Waive annocheck results: --skip-fortify and --skip-lto - Resolves: RHEL-33519 - rebuilt - Waive annocheck results: --skip-fortify and --skip-lto - Resolves: RHEL-33519 - Bump release for June 2024 mass rebuild - Fix python-pooch not fully removed - Resolves: RHEL-35429 - Enable riscv64 - Remove python-pooch optional dependency from RHEL - Related: RHELMISC-5321 - Build without pythran in RHEL by default - Resolves: RHEL-33955 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Migrate to SPDX license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#Detailed_Description - Update the version test expectation. - Update to upstream 0.7.0 - schedule: fix TIMELINE policy retention indexing when keep_x > len(x) - Update expected string in TMT version test - Update to upstream 0.5.2 - Skip test_create_snapshot_set_no_provider in CI - Update TMT configuration - Update to upstream 0.5.1 - Update test path in main.fmf - Remove stray .patch file - Update the version test expectation. - Update to upstream 0.7.0 - schedule: fix TIMELINE policy retention indexing when keep_x > len(x) - Update expected string in TMT version test - Update to upstream 0.5.2 - Skip test_create_snapshot_set_no_provider in CI - Update TMT configuration - Update to upstream 0.5.1 - Update test path in main.fmf - Remove stray .patch file - AlmaLinux changes: Set x86_64 arch as exchangeable to x86_64_v2 - Add testcase for color filtering when adding update targets - Rebase to 0.7.33 - Run dnf CI-Tier-1 tests for gating of libsolv as well - Bump release for October 2024 mass rebuild: - Bump release for Aug 2024 perl mass rebuild - Use digest functions from OpenSSL - Bump release for June 2024 mass rebuild - Stricten dependencies between libsolv subpackages (RHEL-38831) - Configure gating - Set x86_64 arch as exchangeable to x86_64_v2 - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178270) - Cope with integer overflow in data size arithmetics in repo_add_solv() (CVE-2026-9149) (RHEL-178267) - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian repository (CVE-2026-9150) (RHEL-178263) - Add testcase for color filtering when adding update targets - Rebase to 0.7.33 - Run dnf CI-Tier-1 tests for gating of libsolv as well - Bump release for October 2024 mass rebuild: - Bump release for Aug 2024 perl mass rebuild - Use digest functions from OpenSSL - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10 Festival in RHEL 10) - Bump release for June 2024 mass rebuild - Fix split -libs upgrades - Split out libs and adjust dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Have utils require pulseaudio-utils as it's the default. - 0.11.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - [ci] Configure CI tests and gating.yaml - Disable all extras in RHEL builds - Don’t build asyncmy extra package on x86 (32bit) - Update to 2.0.26 - Generate build requirements for extra packages - Avoid mypy dependency in RHEL builds - Upgrade to 2.0.25 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - mod_dav_svn: inherit DavBasePath from mod_dav Resolves: RHEL-105424 - update to 1.14.5 (#2331047) - use %autosetup - enable tests by default again - conditionalize Ruby tests (Yaakov Selkowitz) - Rebase to version 1.14.4 - Resolves: rhbz#2317222 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Fix debuginfo building and stop building ruby and java subpackages - Resolves: RHEL-52974 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building with gcc 14 - incompatible-pointer-types warnings became errors, but they've been present for a long time and posed no threat, thus revert the behaviour - Resolves: rhbz#2259155 - Fix testing of binary patch - Resolves: rhbz#2255746 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Remove Requires:python3-docs for tbb-doc subpackage - Rename 32-bit arch /usr/lib/pkgconfig/tbb32.pc to tbb.pc - Avoid python3-docs dependency on RHEL - Add patch for strict aliasing violation - Rebase to version 2021.11.0 - New -bind subpackage for the NUMA support library - Build with cmake - Minor spec file cleanups - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Security fix for CVE-2026-15308 Resolves: RHEL-193771 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Update to 3.12.12 - Security fix for CVE-2025-8291 Resolves: RHEL-128361 - Security fix for CVE-2025-8194 Resolves: RHEL-106329 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Update to 3.12.12 - Security fix for CVE-2025-8291 Resolves: RHEL-128361 - Security fix for CVE-2025-8194 Resolves: RHEL-106329 - Enable PAC and BTI hardware protections for aarch64 Resolves: RHEL-84196 - Update to Python 3.12.14 Resolves: RHEL-227203 - Security fix for CVE-2026-15308 Resolves: RHEL-193771 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Update to 3.12.12 - Security fix for CVE-2025-8291 Resolves: RHEL-128361 - Update to 3.12.15 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 - Security fix for CVE-2026-87910 Resolves: RHEL-274127 Resolves: RHEL-276240 - Update to Python 3.12.14 Resolves: RHEL-227203 - Security fix for CVE-2026-15308 Resolves: RHEL-193771 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 - Require expat >= 2.7.2 to prevent symbol lookup errors at runtime with older expat Related: RHEL-167886, RHEL-168120 - Security fix for CVE-2026-4519 Resolves: RHEL-158079 - Rebuilding previous fixes for different build target Related: RHEL-143057, RHEL-143109, RHEL-144854 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143057 Resolves: RHEL-143109 Resolves: RHEL-144854 - Security fix for CVE-2025-13836 Resolves: RHEL-140978 - Security fix for CVE-2025-12084 Resolves: RHEL-135387 - Update to 6.5.10 Resolves: RHEL-274866 - Update to 6.5.8 Resolves: RHEL-247266 - Update to 6.5.5 Resolves: RHEL-160935 - httputil: Raise errors instead of logging in multipart/form-data parsing Resolves: RHEL-91992 - Update to 6.4.2 Resolves: RHEL-68668 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 6.5.5 Resolves: RHEL-160935 - httputil: Raise errors instead of logging in multipart/form-data parsing Resolves: RHEL-91992 - Update to 6.4.2 Resolves: RHEL-68668 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Increase timeout for tests on riscv64 - Update to 6.5.8 Resolves: RHEL-247266 - Update to 6.5.5 Resolves: RHEL-160935 - httputil: Raise errors instead of logging in multipart/form-data parsing Resolves: RHEL-91992 - Update to 6.4.2 Resolves: RHEL-68668 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 2.3.0 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Enable tests on i686 again - Enable builds on i686 again - Fix another test issues - New upstream release (#2149103) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Add new DNSSEC root anchor 38696 - Make root.key maintained unmodified - Create root key if missing automatically - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Add unit test for the vulnerability too - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - remove -tests sub-rpm - switch testing to tmt - update to version 25.12 - update to version 25.10 - update to version 25.9 - update to bugfix release 25.7.3 - update to bugfix release 25.7.2 - update to 25.7, switch to pyproject rpm macros - rebase to version 25.4.1 - specfile: do not use %{_libdir} - make getting password from backed up secret FIPS compatible (RHEL-146218) - use sequoia instead of gpgme (RHEL-56368) - Make volume_key FIPS compliant Resolves: RHEL-74047 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add patch to remove shell=True - Update to version 14.2 Resolves: RHEL-103750 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 12.0 rhbz#2245452 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - python-xkbregistry v0.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - bump release to have higher NVR than EPEL 10.0 (RHEL-133018) - rebase to 0.23.0, kudos to Dominik Mierzejewski from Fedora! (RHEL-133018) - unretire python-ztandard (RHEL-122724) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.5.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Port to C99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to Python 3.14.1 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 - Update to Python 3.14.6 Related: RHEL-227190 - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274128 Resolves: RHEL-276241 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 - Update to Python 3.14.6 Related: RHEL-227190 - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haïkel Guémar <hguemar@fedoraproject.org> Iryna Shcherbina <ishcherb@redhat.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumír Balhar <lbalhar@redhat.com> Michal Schorm <mschorm@redhat.com> Miro Hrončok <mhroncok@redhat.com> Yaakov Selkowitz <yselkowi@redhat.com> - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haïkel Guémar <hguemar@fedoraproject.org> Iryna Shcherbina <ishcherb@redhat.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumír Balhar <lbalhar@redhat.com> Michal Schorm <mschorm@redhat.com> Miro Hrončok <mhroncok@redhat.com> Yaakov Selkowitz <yselkowi@redhat.com> - Fix Py_XDECREF of an unitialized pointer - Resolves: RHEL-120796 - Update to 2.0.0 - taken from Fedora 4e8a485 - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-cffi.spec - Update to 3.4.4 - taken from Fedora cf7f8a9 - Add gating.yaml - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-charset-normalizer.spec - Reuploaded sources - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-cryptography.spec - Update to 42.0.8, fixes rhbz#2251816 - Rebuilt for Python 3.13 - Bootstrap for Python 3.13 - Update to 41.0.7, fixes rhbz#2255351, CVE-2023-49083 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Security fixes for CVE-2026-69248 and CVE-2026-69249 - Reuploaded sources - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-cryptography.spec - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to Python 3.14.1 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 - Update to Python 3.14.6 Related: RHEL-227190 - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274128 Resolves: RHEL-276241 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 - Update to Python 3.14.6 Related: RHEL-227190 - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to 3.11 - taken from Fedora 9888320 - Add gating.yaml - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-idna.spec - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to Python 3.14.1 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 - Update to Python 3.14.6 Related: RHEL-227190 - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274128 Resolves: RHEL-276241 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 - Update to Python 3.14.6 Related: RHEL-227190 - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Fix memory leak when initDocDict() fails - Fix another memory leak - Fix a memory leak - Update of sources file while reuploading to centos lookaside cache - Update to 6.0.2 - taken from Fedora 11da0f3 - Change gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-lxml.spec - Initial package Fedora contributions by: Adam Williamson <awilliam@redhat.com> Alexander Bokovoy <abokovoy@redhat.com> Bill Nottingham <notting@fedoraproject.org> Dan Callaghan <dcallagh@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> Igor Gnatenko <ignatenko@redhat.com> Iryna Shcherbina <ishcherb@redhat.com> Jakub Dorňák <jdornak@redhat.com> James Bowes <jbowes@redhat.com> 1.0-1 Jan Kaluza <jkaluza@redhat.com> Jesse Keating <jkeating@fedoraproject.org> Joe Orton <jorton@redhat.com> Josh Kayse <joshkayse@fedoraproject.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@fedoraproject.org> Luboš Uhliarik <luhliari@redhat.com> Luke Macken <lmacken@redhat.com> Matthias Runge <mrunge@redhat.com> Miro Hrončok <mhroncok@redhat.com> Orion Poplawski <orion@cora.nwra.com> Peter Robinson <pbrobinson@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Ricky Zhou <ricky@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Hrnciar <thrnciar@redhat.com> Tom Stellard <tstellar@redhat.com> Troy Dawson <tdawson@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Initial import - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lukáš Zaoral <lzaoral@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@gmail.com> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> Simone Caronni <negativo17@gmail.com> Songsong Zhang <u2fsdgvkx1@gmail.com> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Tulio Magno Quites Machado Filho <tuliom@redhat.com> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> - Initial import - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lukáš Zaoral <lzaoral@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@gmail.com> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> Simone Caronni <negativo17@gmail.com> Songsong Zhang <u2fsdgvkx1@gmail.com> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Tulio Magno Quites Machado Filho <tuliom@redhat.com> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> - Security fix for the bundled urllib3 for CVE-2025-50181 - Include SBOM in the .whl file in python-pip-wheel - Update to 25.2 (rhbz#2385294) - Gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-pip.spec - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pip_install_upgrade to run pip-3.14 - fix bash completion + remove unused metadata file - Security fix for CVE-2026-8643: path traversal in wheel entry points - Security fix for the bundled urllib3 for CVE-2025-50181 - Include SBOM in the .whl file in python-pip-wheel - Update to 25.2 (rhbz#2385294) - Gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-pip.spec - Security fix for the bundled urllib3 for CVE-2025-50181 - Include SBOM in the .whl file in python-pip-wheel - Update to 25.2 (rhbz#2385294) - Gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-pip.spec - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pip_install_upgrade to run pip-3.14 - fix bash completion + remove unused metadata file - Security fix for CVE-2026-8643: path traversal in wheel entry points - Security fix for the bundled urllib3 for CVE-2025-50181 - Include SBOM in the .whl file in python-pip-wheel - Update to 25.2 (rhbz#2385294) - Gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-pip.spec - Update to the latest and last upstream commit - The project won't have any new releases - Use modern pyproject macros Related: RHEL-120807 - Initial package Fedora contributions by: Dennis Gilmore <dennis@ausil.us> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <cheimes@redhat.com> David Malcolm <dmalcolm@redhat.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Rob Crittenden <rcritten@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Thomas Spura <tomspur@fedoraproject.org> Tom Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> - Initial package Fedora contributions by: Ales Nezbeda <anezbeda@redhat.com> Bill Nottingham <notting@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim Gündüz <devrim@gunduz.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason L Tibbitts III <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumír Balhar <lbalhar@redhat.com> Miro Hrončok <mhroncok@redhat.com> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Petr Kubat <pkubat@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Todd Zullinger <tmz@pobox.com> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@redhat.com> - Keep the ply library bundled, as intended upstream - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-pycparser.spec - New upstream release 6.0.3 - Add gating.yaml - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-idna.spec - Additional coverity fixes Related: RHEL-120814 - Fix issues uncovered via coverity scanning Related: RHEL-120814 - Rebuild with newer Cython - Initial package - Fedora contributions by: Antonio Trande <anto.trande@gmail.com> Benjamin A. Beasley <code@musicinmybrain.net> Bill Nottingham <notting@fedoraproject.org> Björn Esser <me@besser82.io> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> David Abdurachmanov <davidlt@rivosinc.com> David Malcolm <dmalcolm@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Elliott Sales de Andrade <quantum.analyst@gmail.com> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenko@redhat.com> Iñaki Úcar <iucar@fedoraproject.org> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Jitka Plesnikova <jplesnik@redhat.com> Jonathan Wakely <jwakely@redhat.com> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mamoru TASAKA <mtasaka@fedoraproject.org> Marcel Plch <mplch@redhat.com> Maxwell G <maxwell@gtmx.me> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomas Tomecek <ttomecek@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> Troy Dawson <tdawson@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120788 - Explicitly require expat >= 2.7.2 - Update to Python 3.14.2 - Update to Python 3.14.1 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 - Update to Python 3.14.6 Related: RHEL-227190 - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144855, RHEL-143058, RHEL-143111 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274128 Resolves: RHEL-276241 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 - Update to Python 3.14.6 Related: RHEL-227190 - Security fix for CVE-2026-15308 Resolves: RHEL-193775 - Update to 3.14.5 Resolves: RHEL-176147 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 - Security fix for CVE-2026-4519 Resolves: RHEL-158114 - Update to 2.6.3 - Fixes CVE-2026-21441 / GHSA-38jv-5279-wg99 - Update to 2.6.2 - Update to 2.6.1 - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37 - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53 - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-urllib3.spec - Fix a regression with Python 3.14.8 - Fix test_start_closed_socket with latest Python - CVE-2026-97689 python3.14-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser - CVE-2026-97687 python3.14-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override - Security fix for CVE-2026-44431 and CVE-2026-44432 - Resolves: RHEL-184903 - Resolves: RHEL-185128 - Update to 2.6.3 - Fixes CVE-2026-21441 / GHSA-38jv-5279-wg99 - Update to 2.6.2 - Update to 2.6.1 - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37 - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53 - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - Security fix for CVE-2026-44431 and CVE-2026-44432 - Resolves: RHEL-184903 - Resolves: RHEL-185128 - Update to 2.6.3 - Fixes CVE-2026-21441 / GHSA-38jv-5279-wg99 - Update to 2.6.2 - Update to 2.6.1 - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37 - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53 - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-urllib3.spec - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389] - Resolves: RHEL-207389 (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z]) - kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702] - kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702] - kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702] - kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702] - kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702] - kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702] - kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702] - kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702] - Resolves: RHEL-190702 (qemu-kvm hung during drain after double pause [rhel-10.2.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529] - Resolves: RHEL-184529 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166007] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166007] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166007] - kvm-scsi-change-buf_size-to-unsigned-int-in-scsi_SG_IO.patch [RHEL-166033] - kvm-scsi-handle-reservation-changes-across-migration.patch [RHEL-166033] - Resolves: RHEL-166007 (live migration failed the VM just register key only [rhel-10.2.z]) - Resolves: RHEL-166033 (live migration failed or get failed WSFC test result during WSFC testing [rhel-10.2.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164536] - Resolves: RHEL-164536 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-10.2.z]) - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - Enable QXL device build - Enable building for ppc64le - Re-added Spice support - Don't remove slof.bin for ppc64le - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224] - Resolves: RHEL-158224 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601] - Resolves: RHEL-155601 (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2]) - kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058] - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004] - Resolves: RHEL-153058 (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot) - Resolves: RHEL-144004 ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147425] - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-132749] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-132749] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-132749] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-132749] - kvm-Revert-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-f.patch [RHEL-134989 RHEL-146584] - Resolves: RHEL-147425 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-132749 (Migrate SCSI PR state and preempt reservation upon live migration) - Resolves: RHEL-134989 (Hotplugged interface device can not be shown in the guest) - Resolves: RHEL-146584 ([RHEL-10.2][ARM]: Unable to Check the mem prefetched size on Guest) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-79118] - kvm-curl-Fix-coroutine-waking.patch [RHEL-79118] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-79118] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-79118] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-79118] - kvm-net-bundle-all-offloads-in-a-single-struct.patch [RHEL-143785] - kvm-linux-headers-deal-with-counted_by-annotation.patch [RHEL-143785] - kvm-linux-headers-Update-to-Linux-v6.17-rc1.patch [RHEL-143785] - kvm-virtio-introduce-extended-features-type.patch [RHEL-143785] - kvm-virtio-serialize-extended-features-state.patch [RHEL-143785] - kvm-virtio-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-virtio-pci-implement-support-for-extended-features.patch [RHEL-143785] - kvm-vhost-add-support-for-negotiating-extended-features.patch [RHEL-143785] - kvm-qmp-update-virtio-features-map-to-support-extended-f.patch [RHEL-143785] - kvm-vhost-backend-implement-extended-features-support.patch [RHEL-143785] - kvm-vhost-net-implement-extended-features-support.patch [RHEL-143785] - kvm-virtio-net-implement-extended-features-support.patch [RHEL-143785] - kvm-net-implement-tunnel-probing.patch [RHEL-143785] - kvm-net-implement-UDP-tunnel-features-offloading.patch [RHEL-143785] - Resolves: RHEL-79118 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled [rhel10]) - Resolves: RHEL-143785 (backport support for GSO over UDP tunnel offload) - kvm-fix-pc_rhel_10_2_compat_len.patch [RHEL-126707] - kvm-q35-increase-default-tseg-size.patch [RHEL-126707] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-139028] - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-111853] - Resolves: RHEL-126707 ([qemu, rhel-10] increase default TSEG size) - Resolves: RHEL-139028 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-10.2]) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-108142] - Resolves: RHEL-108142 (QEMU crashes when stopping source VM during live migration) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-134212] - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-110003] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-110003] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-110003] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-110003] - kvm-rh-configs-enable-CONFIG_TDX-for-x86_64.patch [RHEL-111853] - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Resolves: RHEL-110003 (Expose block limits of block nodes in QMP and qemu-img) - Resolves: RHEL-111853 ([Intel 10.0 FEAT] [SPR] TDX: Virt-QEMU: QEMU Support [rhel-10]) - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-129540] - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-121543] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-134212] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-134212] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-134212] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-134212] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-134212] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-134212] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-134212] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-134212] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-134212] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-134212] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-134212] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-134212] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-134212] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-134212] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-134212] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-134212] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-134212] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-134212] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-134212] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-134212] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-134212] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-134212] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-134212] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-134212] - Resolves: RHEL-129540 (Assertion failure on drain with iothread and I/O load) - Resolves: RHEL-121543 (The VM hit io error when do S3-PR integration on the pass-through failover multipath device) - Resolves: RHEL-134212 ([RHEL10.2] L1VH qemu downstream initial merge RHEL10.2) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2257313 - qpdf-11.8.0 is available - 2255755 - qpdf-11.7.0 is available - 2254778 - remove the tests which fail with zlib-ng-compat for now - 2253901 - qpdf-11.6.4 is available - 2244319 - qpdf-11.6.3 is available - 2242670 - qpdf-11.6.2 is available - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.10.1 Resolves: RHEL-109197 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.9.1 Resolves: RHEL-78553 - Rebuild (LLVM-20) Resolves: RHEL-81776 - Fix directory ownership Resolves: RHEL-74026 - Add versioned deps to -examples Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Fix build against LLVM 19 Resolves: RHEL-64941 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix unit tests (rebuild for qt6-macros) Resolves: RHEL-35968 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.10.1 Resolves: RHEL-109197 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.9.1 Resolves: RHEL-78553 - Rebuild (LLVM-20) Resolves: RHEL-81776 - Fix directory ownership Resolves: RHEL-74026 - Add versioned deps to -examples Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Fix build against LLVM 19 Resolves: RHEL-64941 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix unit tests (rebuild for qt6-macros) Resolves: RHEL-35968 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.10.1 Resolves: RHEL-109197 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.9.1 Resolves: RHEL-78553 - Rebuild (LLVM-20) Resolves: RHEL-81776 - Fix directory ownership Resolves: RHEL-74026 - Add versioned deps to -examples Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Fix build against LLVM 19 Resolves: RHEL-64941 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix unit tests (rebuild for qt6-macros) Resolves: RHEL-35968 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78528 - Add pcc64le support to qt6_qtwebengine_arches macro Resolves: RHEL-79886 - Create lib64 directories only on 64bit architectures Resolves: RHEL-53982 - Add qt6_metatypesdir and qt6_descriptionsdir macros Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Introduce qt6-filesystem package Resolves: RHEL-50034 - Bump release for June 2024 mass rebuild - %qt6_install_tests: also install source files Resolves: RHEL-35968 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.10.1 Resolves: RHEL-109197 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.9.1 Resolves: RHEL-78553 - Rebuild (LLVM-20) Resolves: RHEL-81776 - Fix directory ownership Resolves: RHEL-74026 - Add versioned deps to -examples Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Fix build against LLVM 19 Resolves: RHEL-64941 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix unit tests (rebuild for qt6-macros) Resolves: RHEL-35968 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.10.1 Resolves: RHEL-109197 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.9.1 Resolves: RHEL-78553 - Rebuild (LLVM-20) Resolves: RHEL-81776 - Fix directory ownership Resolves: RHEL-74026 - Add versioned deps to -examples Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Fix build against LLVM 19 Resolves: RHEL-64941 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix unit tests (rebuild for qt6-macros) Resolves: RHEL-35968 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78529 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31145 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78529 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31145 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.1 Resolves: RHEL-109197 - Rebuild (broken buildroot) Resolves: RHEL-78530 - 6.9.1 Resolves: RHEL-78530 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31146 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Fix out-of-bounds read in QTextCodec::codecForName() (CVE-2026-9499) Resolves: RHEL-247204 - 6.10.1 Resolves: RHEL-109197 - Rebuild (broken buildroot) Resolves: RHEL-78530 - 6.9.1 Resolves: RHEL-78530 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - 6.10.1 Resolves: RHEL-109197 - Rebuild (broken buildroot) Resolves: RHEL-78530 - 6.9.1 Resolves: RHEL-78530 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31146 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Fix out-of-bounds read in QTextCodec::codecForName() (CVE-2026-9499) Resolves: RHEL-247204 - 6.10.1 Resolves: RHEL-109197 - Rebuild (broken buildroot) Resolves: RHEL-78530 - 6.9.1 Resolves: RHEL-78530 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable tests for i686 architecture - 6.10.1 Resolves: RHEL-109197 - QSsl: add support for ML-DSA signature algorithm Resolves: RHEL-97008 - 6.9.1 Resolves: RHEL-78531 - Fix emoji rendering issue Resolves: RHEL-76300 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Sync with Fedora: - fix directory ownership - install cmake modules for plugins - depend on pkgconfig(egl) rather than mesa-libEGL-devel Resolves: RHEL-73681 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Move libcupsprintersupport back to -gui as it depends on gui libs Resolves: RHEL-53982 - Move all mkspecs to -devel Resolves: RHEL-53982 - Move more stuff into -private-devel Resolves: RHEL-53982 - Do not install ExamplesAssetDownloader Resolves: RHEL-53982 - Disable tests for i686 architecture - 6.10.1 Resolves: RHEL-109197 - QSsl: add support for ML-DSA signature algorithm Resolves: RHEL-97008 - 6.9.1 Resolves: RHEL-78531 - Fix emoji rendering issue Resolves: RHEL-76300 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Sync with Fedora: - fix directory ownership - install cmake modules for plugins - depend on pkgconfig(egl) rather than mesa-libEGL-devel Resolves: RHEL-73681 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Move libcupsprintersupport back to -gui as it depends on gui libs Resolves: RHEL-53982 - Move all mkspecs to -devel Resolves: RHEL-53982 - Move more stuff into -private-devel Resolves: RHEL-53982 - Do not install ExamplesAssetDownloader Resolves: RHEL-53982 - Disable tests for i686 architecture - 6.10.1 Resolves: RHEL-109197 - QSsl: add support for ML-DSA signature algorithm Resolves: RHEL-97008 - 6.9.1 Resolves: RHEL-78531 - Fix emoji rendering issue Resolves: RHEL-76300 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Sync with Fedora: - fix directory ownership - install cmake modules for plugins - depend on pkgconfig(egl) rather than mesa-libEGL-devel Resolves: RHEL-73681 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Move libcupsprintersupport back to -gui as it depends on gui libs Resolves: RHEL-53982 - Move all mkspecs to -devel Resolves: RHEL-53982 - Move more stuff into -private-devel Resolves: RHEL-53982 - Do not install ExamplesAssetDownloader Resolves: RHEL-53982 - Disable tests for i686 architecture - 6.10.1 Resolves: RHEL-109197 - QSsl: add support for ML-DSA signature algorithm Resolves: RHEL-97008 - 6.9.1 Resolves: RHEL-78531 - Fix emoji rendering issue Resolves: RHEL-76300 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Sync with Fedora: - fix directory ownership - install cmake modules for plugins - depend on pkgconfig(egl) rather than mesa-libEGL-devel Resolves: RHEL-73681 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Move libcupsprintersupport back to -gui as it depends on gui libs Resolves: RHEL-53982 - Move all mkspecs to -devel Resolves: RHEL-53982 - Move more stuff into -private-devel Resolves: RHEL-53982 - Do not install ExamplesAssetDownloader Resolves: RHEL-53982 - Disable tests for i686 architecture - 6.10.1 Resolves: RHEL-109197 - QSsl: add support for ML-DSA signature algorithm Resolves: RHEL-97008 - 6.9.1 Resolves: RHEL-78531 - Fix emoji rendering issue Resolves: RHEL-76300 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Sync with Fedora: - fix directory ownership - install cmake modules for plugins - depend on pkgconfig(egl) rather than mesa-libEGL-devel Resolves: RHEL-73681 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Move libcupsprintersupport back to -gui as it depends on gui libs Resolves: RHEL-53982 - Move all mkspecs to -devel Resolves: RHEL-53982 - Move more stuff into -private-devel Resolves: RHEL-53982 - Do not install ExamplesAssetDownloader Resolves: RHEL-53982 - Disable tests for i686 architecture - 6.10.1 Resolves: RHEL-109197 - QSsl: add support for ML-DSA signature algorithm Resolves: RHEL-97008 - 6.9.1 Resolves: RHEL-78531 - Fix emoji rendering issue Resolves: RHEL-76300 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Sync with Fedora: - fix directory ownership - install cmake modules for plugins - depend on pkgconfig(egl) rather than mesa-libEGL-devel Resolves: RHEL-73681 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Move libcupsprintersupport back to -gui as it depends on gui libs Resolves: RHEL-53982 - Move all mkspecs to -devel Resolves: RHEL-53982 - Move more stuff into -private-devel Resolves: RHEL-53982 - Do not install ExamplesAssetDownloader Resolves: RHEL-53982 - Disable tests for i686 architecture - 6.10.1 Resolves: RHEL-109197 - QSsl: add support for ML-DSA signature algorithm Resolves: RHEL-97008 - 6.9.1 Resolves: RHEL-78531 - Fix emoji rendering issue Resolves: RHEL-76300 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Sync with Fedora: - fix directory ownership - install cmake modules for plugins - depend on pkgconfig(egl) rather than mesa-libEGL-devel Resolves: RHEL-73681 - Backport additional fixes for emoji support Resolves: RHEL-4218 - Move libcupsprintersupport back to -gui as it depends on gui libs Resolves: RHEL-53982 - Move all mkspecs to -devel Resolves: RHEL-53982 - Move more stuff into -private-devel Resolves: RHEL-53982 - Do not install ExamplesAssetDownloader Resolves: RHEL-53982 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78532 - Rebuild (broken buildroot) Resolves: RHEL-78532 - 6.9.1 Resolves: RHEL-78532 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78532 - Rebuild (broken buildroot) Resolves: RHEL-78532 - 6.9.1 Resolves: RHEL-78532 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78533 - Rebuild (broken buildroot) Resolves: RHEL-78533 - 6.9.1 Resolves: RHEL-78533 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78533 - Rebuild (broken buildroot) Resolves: RHEL-78533 - 6.9.1 Resolves: RHEL-78533 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Rebuild (broken buildroot) Resolves: RHEL-78534 - 6.9.1 Resolves: RHEL-78534 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31150 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - Rebuild (broken buildroot) Resolves: RHEL-78534 - 6.9.1 Resolves: RHEL-78534 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31150 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - Backport - CMake: Do not automatically link against Qt6::QmlPrivate Resolves: RHEL-78535 - 6.9.1 Resolves: RHEL-78535 - Drop runtime dependency on qt6-qtbase-private-devel Resolves: RHEL-77748 - Install CMake modules for plugins Resolves: RHEL-73682 - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0 Workaround for rhbz#2330219 Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Do not own /usr/lib[64]/qml directory Resolves: RHEL-50036 - Bump release for June 2024 mass rebuild - VectorImage: sanitize source string used in output (CVE-2025-14576) Resolves: RHEL-173494 - 6.10.1 Resolves: RHEL-109197 - Backport - CMake: Do not automatically link against Qt6::QmlPrivate Resolves: RHEL-78535 - 6.9.1 Resolves: RHEL-78535 - Drop runtime dependency on qt6-qtbase-private-devel Resolves: RHEL-77748 - Install CMake modules for plugins Resolves: RHEL-73682 - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0 Workaround for rhbz#2330219 Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Do not own /usr/lib[64]/qml directory Resolves: RHEL-50036 - 6.10.1 Resolves: RHEL-109197 - Backport - CMake: Do not automatically link against Qt6::QmlPrivate Resolves: RHEL-78535 - 6.9.1 Resolves: RHEL-78535 - Drop runtime dependency on qt6-qtbase-private-devel Resolves: RHEL-77748 - Install CMake modules for plugins Resolves: RHEL-73682 - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0 Workaround for rhbz#2330219 Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Do not own /usr/lib[64]/qml directory Resolves: RHEL-50036 - Bump release for June 2024 mass rebuild - VectorImage: sanitize source string used in output (CVE-2025-14576) Resolves: RHEL-173494 - 6.10.1 Resolves: RHEL-109197 - Backport - CMake: Do not automatically link against Qt6::QmlPrivate Resolves: RHEL-78535 - 6.9.1 Resolves: RHEL-78535 - Drop runtime dependency on qt6-qtbase-private-devel Resolves: RHEL-77748 - Install CMake modules for plugins Resolves: RHEL-73682 - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0 Workaround for rhbz#2330219 Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Do not own /usr/lib[64]/qml directory Resolves: RHEL-50036 - 6.10.1 Resolves: RHEL-109197 - Rebuild (broken buildroot) Resolves: RHEL-78536 - 6.9.1 Resolves: RHEL-78536 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31152 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78537 - Move Software Bill of Materials from -devel Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31153 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78537 - Move Software Bill of Materials from -devel Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31153 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78538 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31154 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78538 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31154 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolve: RHEL-78539 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31155 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolve: RHEL-78539 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31155 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78540 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - Backport Qt 6.7.1 fix for ABI breakage Resolves: RHEL-33606 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31156 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78540 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - Backport Qt 6.7.1 fix for ABI breakage Resolves: RHEL-33606 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31156 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78541 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31157 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78541 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31157 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78542 - 6.9.1 Resolves: RHEL-78542 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78542 - 6.9.1 Resolves: RHEL-78542 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - Disable tests for i686 architecture - 6.10.1 Resolves: RHEL-109197 - Fix CVE-2025-11277 in bundled assimp library Resolves: RHEL-120979 - 6.9.1 Resolves: RHEL-78543 - Fix directory ownership Resolves: RHEL-74027 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31159 - Disable tests for i686 architecture - 6.10.1 Resolves: RHEL-109197 - Fix CVE-2025-11277 in bundled assimp library Resolves: RHEL-120979 - 6.9.1 Resolves: RHEL-78543 - Fix directory ownership Resolves: RHEL-74027 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31159 - 6.10.1 Resolves: RHEL-109197 - Rebuild (broken buildroot) Resolves: RHEL-78544 - 6.9.1 Resolves: RHEL-78544 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31160 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - Rebuild (broken buildroot) Resolves: RHEL-78544 - 6.9.1 Resolves: RHEL-78544 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31160 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78545 - Rebuild (broken buildroot) Resolves: RHEL-78545 - 6.9.1 Resolves: RHEL-78545 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78545 - Rebuild (broken buildroot) Resolves: RHEL-78545 - 6.9.1 Resolves: RHEL-78545 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78546 - Rebuild (broken buildroot) Resolves: RHEL-78546 - 6.9.1 Resolves: RHEL-78546 - Fix directory ownership Resolves: RHEL-74029 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78546 - Rebuild (broken buildroot) Resolves: RHEL-78546 - 6.9.1 Resolves: RHEL-78546 - Fix directory ownership Resolves: RHEL-74029 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78547 - Rebuild (broken buildroot) Resolves: RHEL-78547 - 6.9.1 Resolves: RHEL-78547 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78547 - Rebuild (broken buildroot) Resolves: RHEL-78547 - 6.9.1 Resolves: RHEL-78547 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78548 - 6.9.1 Resolves: RHEL-78548 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78548 - 6.9.1 Resolves: RHEL-78548 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78549 - Rebuild (broken buildroot) Resolves: RHEL-78549 - 6.9.1 Resolves: RHEL-78549 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78549 - Rebuild (broken buildroot) Resolves: RHEL-78549 - 6.9.1 Resolves: RHEL-78549 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78550 - Unbundle glslang Resolves: RHEL-76115 - Add spirv-tools as a dependency to -devel Resolves: RHEL-74028 - Move Software Bill of Materials from -devel Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78550 - Unbundle glslang Resolves: RHEL-76115 - Add spirv-tools as a dependency to -devel Resolves: RHEL-74028 - Move Software Bill of Materials from -devel Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78551 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - Install source files for examples Resolves: RHEL-27845 Resolves: RHEL-31167 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31167 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78551 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - Install source files for examples Resolves: RHEL-27845 Resolves: RHEL-31167 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31167 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78551 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - Install source files for examples Resolves: RHEL-27845 Resolves: RHEL-31167 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31167 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - Upstream backport: Don't add outlines to text when there is none Resolves: RHEL-78552 - 6.9.1 Resolves: RHEL-78552 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31168 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - Upstream backport: Don't add outlines to text when there is none Resolves: RHEL-78552 - 6.9.1 Resolves: RHEL-78552 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31168 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.10.1 Resolves: RHEL-109197 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.9.1 Resolves: RHEL-78553 - Rebuild (LLVM-20) Resolves: RHEL-81776 - Fix directory ownership Resolves: RHEL-74026 - Add versioned deps to -examples Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Fix build against LLVM 19 Resolves: RHEL-64941 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix unit tests (rebuild for qt6-macros) Resolves: RHEL-35968 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.10.1 Resolves: RHEL-109197 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.9.1 Resolves: RHEL-78553 - Rebuild (LLVM-20) Resolves: RHEL-81776 - Fix directory ownership Resolves: RHEL-74026 - Add versioned deps to -examples Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Fix build against LLVM 19 Resolves: RHEL-64941 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix unit tests (rebuild for qt6-macros) Resolves: RHEL-35968 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.10.1 Resolves: RHEL-109197 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.9.1 Resolves: RHEL-78553 - Rebuild (LLVM-20) Resolves: RHEL-81776 - Fix directory ownership Resolves: RHEL-74026 - Add versioned deps to -examples Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Fix build against LLVM 19 Resolves: RHEL-64941 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix unit tests (rebuild for qt6-macros) Resolves: RHEL-35968 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.10.1 Resolves: RHEL-109197 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.9.1 Resolves: RHEL-78553 - Rebuild (LLVM-20) Resolves: RHEL-81776 - Fix directory ownership Resolves: RHEL-74026 - Add versioned deps to -examples Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Fix build against LLVM 19 Resolves: RHEL-64941 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix unit tests (rebuild for qt6-macros) Resolves: RHEL-35968 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.10.1 Resolves: RHEL-109197 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.9.1 Resolves: RHEL-78553 - Rebuild (LLVM-20) Resolves: RHEL-81776 - Fix directory ownership Resolves: RHEL-74026 - Add versioned deps to -examples Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Fix build against LLVM 19 Resolves: RHEL-64941 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix unit tests (rebuild for qt6-macros) Resolves: RHEL-35968 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.10.1 Resolves: RHEL-109197 - Rebuild (LLVM-21) Resolves: RHEL-108338 - 6.9.1 Resolves: RHEL-78553 - Rebuild (LLVM-20) Resolves: RHEL-81776 - Fix directory ownership Resolves: RHEL-74026 - Add versioned deps to -examples Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Fix build against LLVM 19 Resolves: RHEL-64941 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix unit tests (rebuild for qt6-macros) Resolves: RHEL-35968 - Add lib/lib64 symlink for SBOM noarch compatibility - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78554 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31170 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78555 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31171 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78555 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31171 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 6.10.1 Resolves: RHEL-109197 - Add pointer warp support Resolves: RHEL-78556 - 6.9.1 Resolves: RHEL-78556 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31172 Resolves: RHEL-33724 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - Add pointer warp support Resolves: RHEL-78556 - 6.9.1 Resolves: RHEL-78556 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.7.0 Resolves: RHEL-27845 Resolves: RHEL-31172 Resolves: RHEL-33724 - Add -tests subpackage with unit tests that can run in CI Resolves: RHEL-28239 - 6.10.1 Resolves: RHEL-109197 - Add the missing linking of CorePrivate to WebChannelQuick module Resolves: RHEL-78557 - Re-enable tests Resolves: RHEL-78557 - 6.9.1 Resolves: RHEL-78557 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Add the missing linking of CorePrivate to WebChannelQuick module Resolves: RHEL-78557 - Re-enable tests Resolves: RHEL-78557 - 6.9.1 Resolves: RHEL-78557 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78558 - 6.9.1 Resolves: RHEL-78558 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - Re-enable tests Resolves: RHEL-78558 - 6.9.1 Resolves: RHEL-78558 - Re-enable tests Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add rpminspect.yaml Resolves: RHEL-36430 - Enable tests subpackage Resolves: RHEL-36430 - 6.7.1 Resolves: RHEL-36430 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78528 - Add pcc64le support to qt6_qtwebengine_arches macro Resolves: RHEL-79886 - Create lib64 directories only on 64bit architectures Resolves: RHEL-53982 - Add qt6_metatypesdir and qt6_descriptionsdir macros Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Introduce qt6-filesystem package Resolves: RHEL-50034 - Bump release for June 2024 mass rebuild - %qt6_install_tests: also install source files Resolves: RHEL-35968 - 6.10.1 Resolves: RHEL-109197 - 6.9.1 Resolves: RHEL-78528 - Add pcc64le support to qt6_qtwebengine_arches macro Resolves: RHEL-79886 - Create lib64 directories only on 64bit architectures Resolves: RHEL-53982 - Add qt6_metatypesdir and qt6_descriptionsdir macros Resolves: RHEL-53982 - 6.8.1 Resolves: RHEL-53982 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Introduce qt6-filesystem package Resolves: RHEL-50034 - Bump release for June 2024 mass rebuild - %qt6_install_tests: also install source files Resolves: RHEL-35968 - Bump release for SPDX rebuild - Relates: RHEL-119534 - Build quota to verify gating - Relates: RHEL-71489 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add tmpfs quota support - Fix quota-tools on XFS - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for SPDX rebuild - Relates: RHEL-119534 - Build quota to verify gating - Relates: RHEL-71489 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add tmpfs quota support - Fix quota-tools on XFS - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for SPDX rebuild - Relates: RHEL-119534 - Build quota to verify gating - Relates: RHEL-71489 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add tmpfs quota support - Fix quota-tools on XFS - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for SPDX rebuild - Relates: RHEL-119534 - Build quota to verify gating - Relates: RHEL-71489 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add tmpfs quota support - Fix quota-tools on XFS - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Initial packaging - Initial packaging - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Migrate to SPDX license (RHEL-35724) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Backport upstream patch to fix another C99 issue in configure - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Apply upstream patches to fix C99 compatibility issue - Run autoconf/automake during the build - Use systemd-sysusers for radvd user and group (rhbz#2139755) - Add option to exclude old events from reports Resolves: RHEL-79325 - Add support for CXL memory failure event logging Resolves: RHEL-61233 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump to version 0.8.0 using libtraceevent. - Rebase to upstream release 61.0 - Fix pyverbs tests - Rebase to upstream release v57.0 - Properly check %{valgrind_arches} - Fix data corruption in bnxt_re - Update to upstream release v54.0 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Update to upstream release v51.0 - Add rhel10 gating configuration and tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix issues identified by OpenScanHub Resolves: RHEL-44656 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to readline-8.2 patchlevel 10 Resolves: #2259635 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebased to latest upstream version - Dropped previously applied patches - Cleaned up spec file Resolves: RHEL-86705 - Bump the release number Resolves: RHEL-88470 - Added patch Fix-rt-tests-build-with-glibc-2.41.patch - Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch - Added patch sched_attr-Do-not-define-for-glibc-2.41.patch Resolves: RHEL-88470 - Add a usleep option to pip_stress Resolves: RHEL-77111 - Remove unused parameter warning and annotations - Add -Werror Resolves: RHEL-77109 - Limit libcpupower dependency to where it is present Resolves: RHEL-65488 - Fix building against libcpupower Resolves: RHEL-65488 - Rebase to rt-tests-2.8 upstream Resolves: RHEL-68659 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - fix support for PowerNV machines without PPC PReP partitions (RHEL-134218) - fix duplicate execution of automated recovery (RHEL-110659) - fix sorting of stage scripts (RHEL-132181) - add support for dbus-broker (RHEL-134213) - Add a sshd helper to rescue, otherwise sshd does not start, PR 3510 - add dependency on grub2-tools-extra on EFI machines (RHEL-85421) - add initial support for aarch64 machines with UEFI (RHEL-84286) - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771) - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770) - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762) - fix PPC PReP Boot detection on GPT layouts (RHEL-82098) - skip longhorn iscsi devices in disklayout.conf (RHEL-106561) - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563) - require syslinux-extlinux which is necessary for USB devices bootable on legacy BIOS - rebase to version 2.9 (rhbz#2343296) - drop upstreamed patches - remove obsolete patch for rhbz2119501 - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/ - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed) - install correct packages using proper RPM dependencies instead - rebase remaining patches - fix FTBFS after F42 bin/sbin merge - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed license for documentation, and use a cleaned tarball (with the file removed) for build - Generate /etc/rear/os.conf during build again, it is better than generating it in %post, but do not mark it as config file to allow it to be updated during package upgrade and avoid containing an old OS version information - skip btrfs subvolumes when detecting ESP partitions - fix booting on UEFI systems with multiple CDROM devices - fix copying of console kernel cmdline parameters - Use git to apply patches in %prep - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!): - Backport PR 3250 to fix useless warning that libsystemd-core requires additional libraries and ReaR recovery system needs additional libraries - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs:// BACKUP/OUTPUT_URL - fix backup of btrfs subvolumes - Bump release for October 2024 mass rebuild: - set baserelease to fix NVR comparison - fix build by disabling irrelevant debug package - restrict package arches appropriately - fix gating.yaml by generalizing rhel product version string - add gating.yaml copied from c9s branch - import latest fedora sources - New upstream release. Resolves: RHEL-64904 - Remove Italic variable fonts to workaround a crash issue and unexpected italic rendering. Resolves: RHEL-69430 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add a provide line of font(redhatdisplayvf), font(redhattextvf), and font(redhatmonovf) to each sub-packages for backward compatibility. - Fix invalid License field. - Fix wrong comment in conf. - Use no VF in family name version of ttf for -vf packages. - Adjust properties in VF to avoid confusion. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Split packages for variable fonts. - Drop unnecessary/duplicate fonts from packages. - Worked around broken family name in variable fonts. - New upstream release. Resolves: RHEL-64904 - Remove Italic variable fonts to workaround a crash issue and unexpected italic rendering. Resolves: RHEL-69430 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add a provide line of font(redhatdisplayvf), font(redhattextvf), and font(redhatmonovf) to each sub-packages for backward compatibility. - Fix invalid License field. - Fix wrong comment in conf. - Use no VF in family name version of ttf for -vf packages. - Adjust properties in VF to avoid confusion. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Split packages for variable fonts. - Drop unnecessary/duplicate fonts from packages. - Worked around broken family name in variable fonts. - New upstream release. Resolves: RHEL-64904 - Remove Italic variable fonts to workaround a crash issue and unexpected italic rendering. Resolves: RHEL-69430 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add a provide line of font(redhatdisplayvf), font(redhattextvf), and font(redhatmonovf) to each sub-packages for backward compatibility. - Fix invalid License field. - Fix wrong comment in conf. - Use no VF in family name version of ttf for -vf packages. - Adjust properties in VF to avoid confusion. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Split packages for variable fonts. - Drop unnecessary/duplicate fonts from packages. - Worked around broken family name in variable fonts. - Enable frame pointers for AlmaLinux 10+ - Rebuild after infrastructure updates (RHEL-106147) - s390x: Use -mtune=z16 in build flags (RHEL-106147) - Add riscv64 config (RHEL-85862) - Use Fat LTO with Clang - Use upstream versions of find-provides/requires (RHEL-39760) - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-84703) - Add -mbranch-protection=standard to extension builder flags (RHEL-86099) - Fix automatic soname requires on non-versioned symlink targets (RHEL-54592) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Change ppc64le tuning to Power 10 for RHEL10 and beyond (RHEL-58074) - New upstream release. Resolves: RHEL-64904 - Remove Italic variable fonts to workaround a crash issue and unexpected italic rendering. Resolves: RHEL-69430 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add a provide line of font(redhatdisplayvf), font(redhattextvf), and font(redhatmonovf) to each sub-packages for backward compatibility. - Fix invalid License field. - Fix wrong comment in conf. - Use no VF in family name version of ttf for -vf packages. - Adjust properties in VF to avoid confusion. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Split packages for variable fonts. - Drop unnecessary/duplicate fonts from packages. - Worked around broken family name in variable fonts. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Drop requires on java-headless - Switch Java compiler source/target to 1.8 - Resolves: RHEL-52704 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add patch for CVE-2026-16615 (Weak random number generation in PKCE implementation) Resolves: RHEL-213749 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-151437 : storage - fix: ensure libblockdev-loop package on EL7 for loop mounts - Resolves: RHEL-150780 : firewall - fix: el7 interface functionality requires NetworkManager - firewall - test: ensure interface chosen is managed by NetworkManager - Resolves: RHEL-150780 : firewall - fix: el7 interface functionality requires NetworkManager - Resolves: RHEL-145247 : selinux - [v 1.10.4] Prepare module installation -> "Template error: object of type 'dict' has no attribute 'path'" - ha_cluster - fix: ostree - add dnf/dnf5 package, add firewall packages - metrics - test: ostree - add package pcp-pmda-apache, role certificate - systemd - test: ostree requires cronie package for testing - Resolves: RHEL-145214 : selinux - Missing proto 'sctp' and 'dccp' - timesync - fix: use ansible_facts timesync_ntp_provider_current - Resolves: RHEL-145214 : selinux - Missing proto 'sctp' and 'dccp' - Resolves: RHEL-145219 : vpn - [ERROR]: Task failed: object of type 'dict' has no attribute '1.1.1.1' - Resolves: RHEL-144914 : postgresql - add PostgreSQL 18 - fixes test issue - Resolves: RHEL-135522 : snapshot - Snapshot role ignores snapshot_lvm_bootable: true setting when creating a snapset - Resolves: RHEL-123523 : storage - ZeroDivisionError when creating LVM volume without size specification - Resolves: RHEL-144914 : postgresql - add PostgreSQL 18 - fix upstream shellcheck issue in nbde_client role - Resolves: RHEL-122052 : Templates in some role license files - Fix ansible-test issue with community.general.ini_file module 11.4.4 in documentation string - Resolves: RHEL-122052 : Templates in some role license files - Resolves: RHEL-120413 : ha_cluster - ha_cluster role does not work in container builds - Resolves: RHEL-136607 : metrics - [RFE] configure TLS certificates in grafana using the metrics system role - Resolves: RHEL-138277 : ssh - feat: Add new configuration option VersionAddendum - Resolves: RHEL-144495 : sshd - feat: New OpenSSH configuration option GSSAPIDelegateCredentials - Resolves: RHEL-137261 : storage - in _get_device_id IndexError: list index out of range - All roles support INJECT_FACTS_AS_VARS=false - metrics - test: do not restore service if final state not-found - sshd - feat: Add systemd ephemeral authorized_keys to the instantiated service file on Fedora - storage - fix: add vdo package for Fedora OSTree - Resolves: RHEL-129309 : aide - cannot manage rhel9.7/10.1 or earlier - unexpected character - line database=file - Resolves: RHEL-136597 : ha_cluster - feat: add support for fencing-watchdog-timeout - remove hpc role - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves:RHEL-56083 - Typo in fontconfig file - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New release, version 1.5.2 - Change fontconfig priority from 67 to 65 - New release, version 1.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix typo: RHBZ #2258579 - Bugfix update, version 1.4.7 - Bugfix update, version 1.4.6 - Bugfix update, version 1.4.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bugfix update, version 1.4.4 - Bugfix update, version 1.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Initial the rhel-10 gating tests (RHEL-45007) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix: Treat x86_64_v2 as x86_64 in architecture checks - Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112394) - Ignore signatures made by unknown or disabled algorithms (RHEL-112394) - Enable NSS-based user and group lookups again (RHEL-118365) - Fix ignored password field if empty in passwd/group file (RHEL-118365) - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936) - Fix redundant rpmdb-migrate.service runs (RHEL-96510) - Fix rpmsign(8) man page (RHEL-109221) - Additional PQC-related fixes (RHEL-109221) - Add support for multiple OpenPGP signatures per package (RHEL-100571) - Add support for OpenPGP v6 signature pre-salting (RHEL-100571) - Add support for PQC algorithms from RFC-9580 (RHEL-100571) - Add --list and --erase commands to rpmkeys(8) (RHEL-105421) - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023) - Bump release for another rebuild - Fix regression on subpackage debuginfo RPMTAG_SOURCERPM missing (RHEL-87383) - Add support for spec local file attributes and generators (RHEL-84057) - Ensure binary and source headers are identified as such (RHEL-87383) - Fix: Treat x86_64_v2 as x86_64 in architecture checks - Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112394) - Ignore signatures made by unknown or disabled algorithms (RHEL-112394) - Enable NSS-based user and group lookups again (RHEL-118365) - Fix ignored password field if empty in passwd/group file (RHEL-118365) - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936) - Fix redundant rpmdb-migrate.service runs (RHEL-96510) - Fix rpmsign(8) man page (RHEL-109221) - Additional PQC-related fixes (RHEL-109221) - Add support for multiple OpenPGP signatures per package (RHEL-100571) - Add support for OpenPGP v6 signature pre-salting (RHEL-100571) - Add support for PQC algorithms from RFC-9580 (RHEL-100571) - Add --list and --erase commands to rpmkeys(8) (RHEL-105421) - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023) - Bump release for another rebuild - Fix regression on subpackage debuginfo RPMTAG_SOURCERPM missing (RHEL-87383) - Add support for spec local file attributes and generators (RHEL-84057) - Ensure binary and source headers are identified as such (RHEL-87383) - Fix: Treat x86_64_v2 as x86_64 in architecture checks - Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112394) - Ignore signatures made by unknown or disabled algorithms (RHEL-112394) - Enable NSS-based user and group lookups again (RHEL-118365) - Fix ignored password field if empty in passwd/group file (RHEL-118365) - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936) - Fix redundant rpmdb-migrate.service runs (RHEL-96510) - Fix rpmsign(8) man page (RHEL-109221) - Additional PQC-related fixes (RHEL-109221) - Add support for multiple OpenPGP signatures per package (RHEL-100571) - Add support for OpenPGP v6 signature pre-salting (RHEL-100571) - Add support for PQC algorithms from RFC-9580 (RHEL-100571) - Add --list and --erase commands to rpmkeys(8) (RHEL-105421) - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023) - Bump release for another rebuild - Fix regression on subpackage debuginfo RPMTAG_SOURCERPM missing (RHEL-87383) - Add support for spec local file attributes and generators (RHEL-84057) - Ensure binary and source headers are identified as such (RHEL-87383) - Fix: Treat x86_64_v2 as x86_64 in architecture checks - Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112394) - Ignore signatures made by unknown or disabled algorithms (RHEL-112394) - Enable NSS-based user and group lookups again (RHEL-118365) - Fix ignored password field if empty in passwd/group file (RHEL-118365) - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936) - Fix redundant rpmdb-migrate.service runs (RHEL-96510) - Fix rpmsign(8) man page (RHEL-109221) - Additional PQC-related fixes (RHEL-109221) - Add support for multiple OpenPGP signatures per package (RHEL-100571) - Add support for OpenPGP v6 signature pre-salting (RHEL-100571) - Add support for PQC algorithms from RFC-9580 (RHEL-100571) - Add --list and --erase commands to rpmkeys(8) (RHEL-105421) - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023) - Bump release for another rebuild - Fix regression on subpackage debuginfo RPMTAG_SOURCERPM missing (RHEL-87383) - Add support for spec local file attributes and generators (RHEL-84057) - Ensure binary and source headers are identified as such (RHEL-87383) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Backport https://github.com/coreos/rpm-ostree/pull/5558 - Release 2026.1 - Release 2025.12 - Rebase to 2025.11 - Release 2025.10 - Release 2025.9 - Release 2025.8 - Backport: https://github.com/coreos/rpm-ostree/pull/5351 - Release 2025.7 - backport: https://github.com/coreos/rpm-ostree/pull/5322 https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the previous backport: https://github.com/coreos/rpm-ostree/pull/5341 - Backport: https://github.com/coreos/rpm-ostree/pull/5575 - Rebuild for RHEL 10.2 - Backport https://github.com/coreos/rpm-ostree/pull/5569 - Backport https://github.com/coreos/rpm-ostree/pull/5558 - Release 2026.1 - Release 2025.12 - Rebase to 2025.11 - Release 2025.10 - Release 2025.9 - Release 2025.8 - Backport https://github.com/coreos/rpm-ostree/pull/5620 - spec: new upstream version 2026.2 - Backport: https://github.com/coreos/rpm-ostree/pull/5575 - Rebuild for RHEL 10.2 - Backport https://github.com/coreos/rpm-ostree/pull/5569 - Backport https://github.com/coreos/rpm-ostree/pull/5558 - Release 2026.1 - Release 2025.12 - Rebase to 2025.11 - Release 2025.10 - Backport https://github.com/coreos/rpm-ostree/pull/5633 - Rebase rpm-ostree to 2026.3 - Backport https://github.com/coreos/rpm-ostree/pull/5620 - spec: new upstream version 2026.2 - Backport: https://github.com/coreos/rpm-ostree/pull/5575 - Rebuild for RHEL 10.2 - Backport https://github.com/coreos/rpm-ostree/pull/5569 - Backport https://github.com/coreos/rpm-ostree/pull/5558 - Release 2026.1 - Release 2025.12 - Backport https://github.com/coreos/rpm-ostree/pull/5558 - Release 2026.1 - Release 2025.12 - Rebase to 2025.11 - Release 2025.10 - Release 2025.9 - Release 2025.8 - Backport: https://github.com/coreos/rpm-ostree/pull/5351 - Release 2025.7 - backport: https://github.com/coreos/rpm-ostree/pull/5322 https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the previous backport: https://github.com/coreos/rpm-ostree/pull/5341 - Backport: https://github.com/coreos/rpm-ostree/pull/5575 - Rebuild for RHEL 10.2 - Backport https://github.com/coreos/rpm-ostree/pull/5569 - Backport https://github.com/coreos/rpm-ostree/pull/5558 - Release 2026.1 - Release 2025.12 - Rebase to 2025.11 - Release 2025.10 - Release 2025.9 - Release 2025.8 - Backport https://github.com/coreos/rpm-ostree/pull/5620 - spec: new upstream version 2026.2 - Backport: https://github.com/coreos/rpm-ostree/pull/5575 - Rebuild for RHEL 10.2 - Backport https://github.com/coreos/rpm-ostree/pull/5569 - Backport https://github.com/coreos/rpm-ostree/pull/5558 - Release 2026.1 - Release 2025.12 - Rebase to 2025.11 - Release 2025.10 - Backport https://github.com/coreos/rpm-ostree/pull/5633 - Rebase rpm-ostree to 2026.3 - Backport https://github.com/coreos/rpm-ostree/pull/5620 - spec: new upstream version 2026.2 - Backport: https://github.com/coreos/rpm-ostree/pull/5575 - Rebuild for RHEL 10.2 - Backport https://github.com/coreos/rpm-ostree/pull/5569 - Backport https://github.com/coreos/rpm-ostree/pull/5558 - Release 2026.1 - Release 2025.12 - Fix: Treat x86_64_v2 as x86_64 in architecture checks - Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112394) - Ignore signatures made by unknown or disabled algorithms (RHEL-112394) - Enable NSS-based user and group lookups again (RHEL-118365) - Fix ignored password field if empty in passwd/group file (RHEL-118365) - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936) - Fix redundant rpmdb-migrate.service runs (RHEL-96510) - Fix rpmsign(8) man page (RHEL-109221) - Additional PQC-related fixes (RHEL-109221) - Add support for multiple OpenPGP signatures per package (RHEL-100571) - Add support for OpenPGP v6 signature pre-salting (RHEL-100571) - Add support for PQC algorithms from RFC-9580 (RHEL-100571) - Add --list and --erase commands to rpmkeys(8) (RHEL-105421) - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023) - Bump release for another rebuild - Fix regression on subpackage debuginfo RPMTAG_SOURCERPM missing (RHEL-87383) - Add support for spec local file attributes and generators (RHEL-84057) - Ensure binary and source headers are identified as such (RHEL-87383) - Fix: Treat x86_64_v2 as x86_64 in architecture checks - Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112394) - Ignore signatures made by unknown or disabled algorithms (RHEL-112394) - Enable NSS-based user and group lookups again (RHEL-118365) - Fix ignored password field if empty in passwd/group file (RHEL-118365) - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936) - Fix redundant rpmdb-migrate.service runs (RHEL-96510) - Fix rpmsign(8) man page (RHEL-109221) - Additional PQC-related fixes (RHEL-109221) - Add support for multiple OpenPGP signatures per package (RHEL-100571) - Add support for OpenPGP v6 signature pre-salting (RHEL-100571) - Add support for PQC algorithms from RFC-9580 (RHEL-100571) - Add --list and --erase commands to rpmkeys(8) (RHEL-105421) - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023) - Bump release for another rebuild - Fix regression on subpackage debuginfo RPMTAG_SOURCERPM missing (RHEL-87383) - Add support for spec local file attributes and generators (RHEL-84057) - Ensure binary and source headers are identified as such (RHEL-87383) - Fix: Treat x86_64_v2 as x86_64 in architecture checks - Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112394) - Ignore signatures made by unknown or disabled algorithms (RHEL-112394) - Enable NSS-based user and group lookups again (RHEL-118365) - Fix ignored password field if empty in passwd/group file (RHEL-118365) - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936) - Fix redundant rpmdb-migrate.service runs (RHEL-96510) - Fix rpmsign(8) man page (RHEL-109221) - Additional PQC-related fixes (RHEL-109221) - Add support for multiple OpenPGP signatures per package (RHEL-100571) - Add support for OpenPGP v6 signature pre-salting (RHEL-100571) - Add support for PQC algorithms from RFC-9580 (RHEL-100571) - Add --list and --erase commands to rpmkeys(8) (RHEL-105421) - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023) - Bump release for another rebuild - Fix regression on subpackage debuginfo RPMTAG_SOURCERPM missing (RHEL-87383) - Add support for spec local file attributes and generators (RHEL-84057) - Ensure binary and source headers are identified as such (RHEL-87383) - Fix: Treat x86_64_v2 as x86_64 in architecture checks - Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112394) - Ignore signatures made by unknown or disabled algorithms (RHEL-112394) - Enable NSS-based user and group lookups again (RHEL-118365) - Fix ignored password field if empty in passwd/group file (RHEL-118365) - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936) - Fix redundant rpmdb-migrate.service runs (RHEL-96510) - Fix rpmsign(8) man page (RHEL-109221) - Additional PQC-related fixes (RHEL-109221) - Add support for multiple OpenPGP signatures per package (RHEL-100571) - Add support for OpenPGP v6 signature pre-salting (RHEL-100571) - Add support for PQC algorithms from RFC-9580 (RHEL-100571) - Add --list and --erase commands to rpmkeys(8) (RHEL-105421) - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023) - Bump release for another rebuild - Fix regression on subpackage debuginfo RPMTAG_SOURCERPM missing (RHEL-87383) - Add support for spec local file attributes and generators (RHEL-84057) - Ensure binary and source headers are identified as such (RHEL-87383) - Fix: Treat x86_64_v2 as x86_64 in architecture checks - Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112394) - Ignore signatures made by unknown or disabled algorithms (RHEL-112394) - Enable NSS-based user and group lookups again (RHEL-118365) - Fix ignored password field if empty in passwd/group file (RHEL-118365) - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936) - Fix redundant rpmdb-migrate.service runs (RHEL-96510) - Fix rpmsign(8) man page (RHEL-109221) - Additional PQC-related fixes (RHEL-109221) - Add support for multiple OpenPGP signatures per package (RHEL-100571) - Add support for OpenPGP v6 signature pre-salting (RHEL-100571) - Add support for PQC algorithms from RFC-9580 (RHEL-100571) - Add --list and --erase commands to rpmkeys(8) (RHEL-105421) - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023) - Bump release for another rebuild - Fix regression on subpackage debuginfo RPMTAG_SOURCERPM missing (RHEL-87383) - Add support for spec local file attributes and generators (RHEL-84057) - Ensure binary and source headers are identified as such (RHEL-87383) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert a license tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Added recently approved SPDX exception rrdtool-floss-exception-2.0 Resolves: RHEL-38985 - Converted license to SPDX - Fixed FTBFS with GCC 14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173264 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Added recently approved SPDX exception rrdtool-floss-exception-2.0 Resolves: RHEL-38985 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Added recently approved SPDX exception rrdtool-floss-exception-2.0 Resolves: RHEL-38985 - Converted license to SPDX - Fixed FTBFS with GCC 14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173264 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Added recently approved SPDX exception rrdtool-floss-exception-2.0 Resolves: RHEL-38985 - Bump release for October 2024 mass rebuild: - add gating.yaml - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 2.0.17 - rshim.spec: migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Upstream relase 2.0.9 - Update to upstream release 2.0.8 - Fix FTBFS by updating time crate - Bump release for October 2024 mass rebuild: - Backport a patch from rawhide disabling broken tests - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.57.1 - Fix RHEL build - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities - Fix FTBFS by updating time crate - Bump release for October 2024 mass rebuild: - Resolves: RHEL-172276 - Fix regression introduced with CVE-2024-12086 fix - Resolves: RHEL-169137 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-152527 - CVE-2025-10158 Out of bounds array access via negative index - Resolves: RHEL-118549 - Do not clear DISPLAY unconditionally - Resolves: RHEL-71293 - Build rsync with --with-rrsync - New version 3.4.1 - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70203 - rsync server leaks arbitrary client files - Resolves: RHEL-72500 - Path traversal vulnerability in rsync - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-71293 - Build rsync with --with-rrsync - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixing a condition for BuildRequires on xxhash in RHEL - Disabling xxhash because it is being removed from RHEL - Adding rpminspect.yaml - Resolves: RHEL-181630 - Rebase rsync to version 3.4.4 - Resolves: RHEL-174929 - TOCTOU symlink race condition (CVE-2026-29518) - Resolves: RHEL-174949 - Memory disclosure via int overflow (CVE-2026-43618) - Resolves: RHEL-118549 - Do not clear DISPLAY unconditionally - Resolves: RHEL-71293 - Build rsync with --with-rrsync - New version 3.4.1 - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70203 - rsync server leaks arbitrary client files - Resolves: RHEL-72500 - Path traversal vulnerability in rsync - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-71293 - Build rsync with --with-rrsync - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixing a condition for BuildRequires on xxhash in RHEL - Disabling xxhash because it is being removed from RHEL - Adding rpminspect.yaml - Bump release for June 2024 mass rebuild - Related: RHEL-246094 - O_PATH for directory travesal full fix - Related: RHEL-246094 - O_PATH for directory traversal - Resolves: RHEL-246094 - Rebase rsync to version 3.5.0 in RHEL10 - Resolves: RHEL-245337 - Directory escape via TOCTOU (CVE-2026-53783) - Resolves: RHEL-244599 - Arbitrary file write (CVE-2026-53785) - Resolves: RHEL-246095 - Command injection (CVE-2026-53790) - Resolves: RHEL-246065 - Daemon IP spoofing (CVE-2026-53791) - Resolves: RHEL-244718 - Local privilege escalation (CVE-2026-53803) - Resolves: RHEL-244797 - DoS via algorithmic complexity (CVE-2026-70453) - Resolves: RHEL-245247 - DoS via Zstandard compression (CVE-2026-70455) - Resolves: RHEL-245188 - Heap out-of-bounds write (CVE-2026-70456) - Resolves: RHEL-245313 - Information disclosure and DoS (CVE-2026-70461) - Resolves: RHEL-181630 - Rebase rsync to version 3.4.4 - Resolves: RHEL-174929 - TOCTOU symlink race condition (CVE-2026-29518) - Resolves: RHEL-174949 - Memory disclosure via int overflow (CVE-2026-43618) - Resolves: RHEL-118549 - Do not clear DISPLAY unconditionally - Resolves: RHEL-71293 - Build rsync with --with-rrsync - New version 3.4.1 - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70203 - rsync server leaks arbitrary client files - Resolves: RHEL-72500 - Path traversal vulnerability in rsync - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-71293 - Build rsync with --with-rrsync - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-172276 - Fix regression introduced with CVE-2024-12086 fix - Resolves: RHEL-169137 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-152527 - CVE-2025-10158 Out of bounds array access via negative index - Resolves: RHEL-118549 - Do not clear DISPLAY unconditionally - Resolves: RHEL-71293 - Build rsync with --with-rrsync - New version 3.4.1 - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70203 - rsync server leaks arbitrary client files - Resolves: RHEL-72500 - Path traversal vulnerability in rsync - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-71293 - Build rsync with --with-rrsync - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixing a condition for BuildRequires on xxhash in RHEL - Disabling xxhash because it is being removed from RHEL - Adding rpminspect.yaml - Resolves: RHEL-181630 - Rebase rsync to version 3.4.4 - Resolves: RHEL-174929 - TOCTOU symlink race condition (CVE-2026-29518) - Resolves: RHEL-174949 - Memory disclosure via int overflow (CVE-2026-43618) - Resolves: RHEL-118549 - Do not clear DISPLAY unconditionally - Resolves: RHEL-71293 - Build rsync with --with-rrsync - New version 3.4.1 - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70203 - rsync server leaks arbitrary client files - Resolves: RHEL-72500 - Path traversal vulnerability in rsync - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-71293 - Build rsync with --with-rrsync - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fixing a condition for BuildRequires on xxhash in RHEL - Disabling xxhash because it is being removed from RHEL - Adding rpminspect.yaml - Bump release for June 2024 mass rebuild - Related: RHEL-246094 - O_PATH for directory travesal full fix - Related: RHEL-246094 - O_PATH for directory traversal - Resolves: RHEL-246094 - Rebase rsync to version 3.5.0 in RHEL10 - Resolves: RHEL-245337 - Directory escape via TOCTOU (CVE-2026-53783) - Resolves: RHEL-244599 - Arbitrary file write (CVE-2026-53785) - Resolves: RHEL-246095 - Command injection (CVE-2026-53790) - Resolves: RHEL-246065 - Daemon IP spoofing (CVE-2026-53791) - Resolves: RHEL-244718 - Local privilege escalation (CVE-2026-53803) - Resolves: RHEL-244797 - DoS via algorithmic complexity (CVE-2026-70453) - Resolves: RHEL-245247 - DoS via Zstandard compression (CVE-2026-70455) - Resolves: RHEL-245188 - Heap out-of-bounds write (CVE-2026-70456) - Resolves: RHEL-245313 - Information disclosure and DoS (CVE-2026-70461) - Resolves: RHEL-181630 - Rebase rsync to version 3.4.4 - Resolves: RHEL-174929 - TOCTOU symlink race condition (CVE-2026-29518) - Resolves: RHEL-174949 - Memory disclosure via int overflow (CVE-2026-43618) - Resolves: RHEL-118549 - Do not clear DISPLAY unconditionally - Resolves: RHEL-71293 - Build rsync with --with-rrsync - New version 3.4.1 - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70203 - rsync server leaks arbitrary client files - Resolves: RHEL-72500 - Path traversal vulnerability in rsync - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-71293 - Build rsync with --with-rrsync - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Bump release for June 2024 mass rebuild - Rebase to 8.2312.0 resolves: rhbz#2232275 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.2408.0 - Remove dependency on libgcrypt - Introduce new ossl crypto provider, replacement for gcry Resolves: RHEL-22023 - Remove mmtaghostname subpackage - Do not build with openssl engine support resolves: RHEL-52863 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633 - Backport: guard regex-framing match against iCurrLine == 0 to fix crash Resolves: RHEL-212700 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-106763 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-119492 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-106477 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92757 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-96589 - man page version update Resolves: RHEL-96592 - Add tmpfiles.d configuration Resolves: RHEL-89795 - Rebase to 8.2412.0 Resolves: RHEL-70110 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-41153 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-35823 - Fix segfault due to processing malform queue message Resolves: RHEL-33451 - Fix crash on startup when an invalid function is specified Resolves: RHEL-59893 - Startup rsyslog service after network-online.target Resolves: RHEL-39284 - Harden service file Resolves: RHEL-39237 - imjournal: PID nummber is retrieved from the journal by default Resolves: RHEL-39413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: - Gating configuration followup - Don't store debug messages from rtkit-daemon - Add gating configuration - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format). - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 3.4.4. Resolves: rhbz#2359563 - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters. Resolves: rhbz#2358256 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 3.4.4. Resolves: rhbz#2359563 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 4.0.6. Resolves: RHEL-211310 Resolves: RHEL-193660 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252032 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211310 Resolves: RHEL-193660 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 3.4.4. Resolves: rhbz#2359563 - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters. Resolves: rhbz#2358256 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 3.4.4. Resolves: rhbz#2359563 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 4.0.6. Resolves: RHEL-211310 Resolves: RHEL-193660 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252032 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211310 Resolves: RHEL-193660 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 3.4.4. Resolves: rhbz#2359563 - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters. Resolves: rhbz#2358256 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 3.4.4. Resolves: rhbz#2359563 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 4.0.6. Resolves: RHEL-211310 Resolves: RHEL-193660 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252032 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211310 Resolves: RHEL-193660 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 3.4.4. Resolves: rhbz#2359563 - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters. Resolves: rhbz#2358256 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 3.4.4. Resolves: rhbz#2359563 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Upgrade to Ruby 4.0.6. Resolves: RHEL-211310 Resolves: RHEL-193660 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Upgrade to Ruby 3.4.5. Resolves: rhbz#2380246 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252032 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211310 Resolves: RHEL-193660 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability (CVE-2026-42245) Includes core fix plus additional performance optimizations Resolves: RHEL-181675 - Fix Net::IMAP STARTTLS stripping vulnerability (CVE-2026-42246) Resolves: RHEL-181767 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments (CVE-2026-42258) Resolves: RHEL-181793 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171239 - Fix ERB: Arbitrary code execution via bypass (CVE-2026-41316) Resolves: RHEL-170910 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173457 - Initial package. Resolves: RHEL-133550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Upgrade to Ruby 4.0.1. Resolves: rhbz#2428861 - Upgrade to Ruby 4.0.0. Resolves: rhbz#2425358 - Update to Ruby 3.4.8. Resolves: rhbz#2422963 Resolves: rhbz#2412227 - Upgrade to Ruby 3.4.7. Resolves: rhbz#2402422 - Fix URI Credential Leakage Bypass previous fixes. Resolves: CVE-2025-61594 - Fix REXML denial of service. Resolves: CVE-2025-58767 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Adapt tests to mariadb 10.11 - Avoid rubygem-eventmachine build dependency in RHEL - Adapt tests to openssl 3.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_3.3 - Upgrade to rubygem-mysql2 0.5.5. Resolves: rhbz#2163026 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_3.2 - Fix the broken SSL tests with MariaDB 10.5.18. Resolves: rhbz#2144488 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_3.3 - Upgrade to pg 1.5.4. Resolves: rhbz#2173399 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_3.2 - Update to pg 1.4.5. Resolves: rhbz#2099059 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.1. Resolves: RHEL-33975 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34124 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34116 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33866 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Bump release for June 2024 mass rebuild - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181687 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181775 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181797 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171245 - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122028 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.7 Resolves: RHEL-77994 - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version. Resolves: RHEL-21019 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Upgrade to Ruby 3.3.5 Resolves: RHEL-59035 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57047 Resolves: RHEL-57059 Resolves: RHEL-57070 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-52802 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.86.0 - AlmaLinux changes: Use the correct architecture in x86_64_v2 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Update to Rust 1.88.0 - Update to Rust 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Recreate RHEL 6.12.0-211.16.1 from CentOS Stream 10 and upstream stable backports (1106-1161) - Drop 211.7.x security-ahead patches superseded by the RHEL backports (1100-1104: crypto authencesn/algif, xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace) - Keep the smb cifs.spnego ahead-fix (1105) - RHEL changelog for 211.8.1..211.16.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607} - xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531] - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408} - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354] - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724} - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402} - KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401} - ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717] - ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717] - ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270} - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855] - ice: drop udp_tunnel_get_rx_info() call from ndo_open() (Mohammad Heib) [RHEL-165081] - i40e: drop udp_tunnel_get_rx_info() call from i40e_open() (Mohammad Heib) [RHEL-165081] - ALSA: hda/tas2781: Ignore reset check for SPI device (Jaroslav Kysela) [RHEL-157285] - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158990] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159227] {CVE-2025-68741} - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-155205] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-158206] - net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-157946] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155971] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155971] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150456] {CVE-2025-39766} - Recreate RHEL 6.12.0-211.18.1 from CentOS Stream 10 and upstream stable backports (1162-1244) - RHEL changelog for 211.17.1..211.18.1 follows: - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872] - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625] - redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov) - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303} - dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205} - mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375} - fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617] - anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617] - anon_inode: explicitly block ->setattr() (Rafael Aquini) [RHEL-171617] - pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617] - anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617] - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331] - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331] - net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190} - netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110} - redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027} - io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006} - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434] - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684} - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180] - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183} - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645} - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392} - Recreate RHEL 6.12.0-211.20.1 from CentOS Stream 10 and upstream stable backports (1245-1287) - smb cifs.spnego now shipped by RHEL too; existing ahead-fix 1105 is identical (RHEL's redundant copy omitted) - RHEL changelog for 211.19.1..211.20.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243} - redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469] - sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466] - Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322} - Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903] - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903] - Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903] - Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903] - Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903] - Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903] - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821] - dpll: add pin operational state (Ivan Vecera) [RHEL-175821] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930] - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302] - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366} - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653} - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.26.1 from CentOS Stream 10 and upstream stable backports (1352-1373) - Enable watchdog pretimeout panic functionality for x86 via kernel config (RHEL-182299) - RHEL changelog for 211.23.1..211.26.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173} - crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056} - gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann) - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299] - mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723] - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127] - objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495] - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056} - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474} - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787} - rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641} - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047] - Recreate RHEL 6.12.0-211.22.1 from CentOS Stream 10 and upstream stable backports (1288-1352) - RHEL changelog for 211.21.1..211.22.1 follows: - scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932] - ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932] - ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932] - ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932] - ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932] - ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932] - arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932] - scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932] - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932] - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037} - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581} - erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532} - nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788] - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473] - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518] - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855] - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419} - Recreate RHEL 6.12.0-211.28.1 from CentOS Stream 10 and upstream stable backports (1375-1383) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1374) - RHEL changelog for 211.27.1..211.28.1 follows: - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198} - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898} - rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636} - nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.30.1 from CentOS Stream 10 and upstream stable backports (1399-1414) - RHEL 6.12.0-211.30.1 now also carries the vgic-its (CVE-2026-46316) and ipv4/ipv6 fraggap fixes AlmaLinux shipped ahead; the AlmaLinux patches (1374, 1384-1385) are retained and RHEL's duplicate copies omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 211.30.1 follows: - ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263} - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537] - ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110] - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998} - Recreate RHEL 6.12.0-211.29.1 from CentOS Stream 10 and upstream stable backports (1386-1398) - Retain AlmaLinux ahead-of-RHEL fixes: CVE-2026-46316 (1374), ipv4/ipv6 fraggap (1384-1385) - RHEL changelog for 211.29.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759] - crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279} - Recreate RHEL 6.12.0-211.31.1 from CentOS Stream 10 and upstream stable backports (1421-1444) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1417) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1418, 1420) - RHEL changelog for 211.31.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Recreate RHEL 6.12.0-211.34.1 from CentOS Stream 10 and upstream stable backports (1456-1458) - RHEL changelog for 211.34.1 follows: - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Recreate RHEL 6.12.0-211.33.1 from CentOS Stream 10 and upstream stable backports (1451-1455) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1445, 1446) are superseded by RHEL's copies and dropped - RHEL changelog for 211.33.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Recreate RHEL 6.12.0-211.32.1 from upstream stable backports (1447-1450) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1415, 1416) are superseded by RHEL's copies and dropped - RHEL changelog for 211.32.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776] - eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614} - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180776] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770] - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259} - net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276} - net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232] - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232] - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232] - nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103] - nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103] - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887] - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530} - flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168} - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071} - redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311] - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945] - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324] - ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324] - ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324] - ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324] - ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324] - ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324] - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166} - bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324] - bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324] - bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324] - bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324] - bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324] - bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324] - bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324] - bitmap: Add test for out-of-boundary modifications for scatter & gather (Jakub Ramaseuski) [RHEL-191324] - cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324] - bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324] - bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324] - include: update references to include/asm-<arch> (Jakub Ramaseuski) [RHEL-191324] - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147} - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973} - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099} - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692} - fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237} - fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188] - net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - KVM: x86: check for invalid/obsolete root after making MMU pages available {CVE-2026-64561} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086} - rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254] - rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254] - rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254] - rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254] - crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254] - rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635} - rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633} - rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632} - rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631} - rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254] - rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254] - rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254] - rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254] - rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211} - isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303} - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063] - ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011] - drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832] - drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832] - drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832] - procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199} - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134] - ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134] - ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134] - ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134] - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134] - ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134] - ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134] - ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134] - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345] - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368} - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503] - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531} - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035] - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488} - shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923} - fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887} - perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300} - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202} - netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311] - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311] - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311] - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311] - netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311] - netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311] - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311] - netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311] - netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311] - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311] - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311] - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311] - netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311] - netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311] - netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311] - netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311] - netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311] - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311] - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311] - netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311] - rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324} - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311] - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311] - netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841} - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665} - netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085} - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424} - netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026} - netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311] - netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416} - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495} - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674} - netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311] - netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311] - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456} - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457} - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407} - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453} - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233} - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - af_unix: set gc_in_progress to true in unix_gc() {CVE-2026-53361} - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237} - sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545] - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370} - exit: kill the pointless __exit_signal()->clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850] - exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850] - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581} - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808} - KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069} - s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180] - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391} - NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438} - mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417} - mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480} - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277} - mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384} - mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153} - s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507] - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320} - sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393] - seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120} - netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - fuse: fix race between interrupt and resend (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (Miklos Szeredi) [RHEL-218495] {CVE-2026-64265} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248457] {CVE-2026-64563} - udp: Fix wildcard bind conflict check when using hash2 (Felix Maurer) [RHEL-218016] {CVE-2026-31503} - tcp: optimize inet_use_bhash2_on_bind() (Felix Maurer) [RHEL-218016] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232246] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232629] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226125] {CVE-2026-46266} - ipv6: anycast: insert aca into global hash under idev->lock (Felix Maurer) [RHEL-230763] {CVE-2026-53259} - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226073] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225606] {CVE-2026-43339} - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225864] {CVE-2026-53223} - net: add pskb_may_pull() to skb_gro_receive_list() (Felix Maurer) [RHEL-229309] {CVE-2026-53235} - can: bcm: extend bcm_tx_lock usage for data and timer updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (Abhishek Rawal) [RHEL-216700] {CVE-2025-38004} - smb: client: fix double-free in SMB2_close() replay (Paulo Alcantara) [RHEL-240056] {CVE-2026-64597} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-132852] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-132852] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-132852] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-132852] - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Abhishek Rawal) [RHEL-228009] {CVE-2026-53075} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231711] {CVE-2026-63993} - ipv6: sit: reload inner IPv6 header after GSO offloads (Abhishek Rawal) [RHEL-225920] {CVE-2026-53228} - ipv6: add NULL checks for idev in SRv6 paths (Abhishek Rawal) [RHEL-218012] {CVE-2026-23442} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234153] {CVE-2026-64319} - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CKI Backport Bot) [RHEL-234204] {CVE-2026-64287} - KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CKI Backport Bot) [RHEL-229347] {CVE-2026-53277} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227269] {CVE-2026-64002} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227111] {CVE-2026-52933} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244969] {CVE-2026-72098} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244928] {CVE-2026-72129} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193027] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193027] - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-237706] {CVE-2026-68409} - wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses (Jose Ignacio Tornos Martinez) [RHEL-237681] {CVE-2026-68193} - wifi: mt76: mt7925: fix crash in reset link replay (Jose Ignacio Tornos Martinez) [RHEL-237527] {CVE-2026-68307} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232015] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231685] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230977] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230604] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229725] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227617] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232673] {CVE-2026-53072} - accel/qaic: Add overflow check to remap_pfn_range during mmap (CKI Backport Bot) [RHEL-232178] {CVE-2026-64051} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231067] {CVE-2026-63947} - Bluetooth: virtio_bt: validate rx pkt_type header length (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: virtio_bt: clamp rx length before skb_put (CKI Backport Bot) [RHEL-230949] {CVE-2026-46123} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230076] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230013] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228750] {CVE-2026-63975} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227911] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227889] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227532] {CVE-2026-43334} - vfio/pci: Check BAR resources before exporting a DMABUF (CKI Backport Bot) [RHEL-227133] {CVE-2026-64042} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225690] {CVE-2026-64015} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225653] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225574] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225552] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188232] {CVE-2026-53091} - vfio/pci: Clean up DMABUFs before disabling function (CKI Backport Bot) [RHEL-189549] {CVE-2026-53322} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189468] {CVE-2026-43133} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246933] {CVE-2026-74480} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - gve: update QPL page registration logic to honor max_registered_pages (backport from upstream) - gve: enable reading max ring size from the device in DQO-QPL mode (backport from upstream) - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - arm64: dts: s32g: add SAR ADC support for s32g2 and s32g3 (Jared Kangas) [RHEL-256890] - arm64: dts: s32g3: Fix SWT8 watchdog address (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: harden buffer ISR against per-channel read failure (Albert Esteve) [RHEL-256890] - iio: adc: nxp-sar-adc: Remove unnecessary type casting (Albert Esteve) [RHEL-256890] - iio: core: fix uninitialized data in debugfs (Albert Esteve) [RHEL-256890] - iio: fix potential out-of-bound write (Albert Esteve) [RHEL-256890] - iio: core: make use of simple_write_to_buffer() (Albert Esteve) [RHEL-256890] - iio: buffer: Move from int64_t to s64 for timestamp (Albert Esteve) [RHEL-256890] - iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (Albert Esteve) [RHEL-256890] - iio: Replace 'sign' field with union in struct iio_scan_type (Albert Esteve) [RHEL-256890] - iio: buffer: ensure repeat alignment is a power of two (Albert Esteve) [RHEL-256890] - iio: buffer: cache timestamp offset in scan buffer (Albert Esteve) [RHEL-256890] - iio: buffer: check return value of iio_compute_scan_bytes() (Albert Esteve) [RHEL-256890] - iio: core: Clean up device correctly on viio_trigger_alloc() failure (Albert Esteve) [RHEL-256890] - iio: core: Simplify IIO core managed APIs (Albert Esteve) [RHEL-256890] - iio: inkern: call iio_device_put() only on mapped devices (Albert Esteve) [RHEL-256890] - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use dev_err_probe() to simplify code (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Use managed API dmaenginem_async_device_register() (Albert Esteve) [RHEL-256890] - dmaengine: of_dma: Add devm_of_dma_controller_register() (Albert Esteve) [RHEL-256890] - dt-bindings: dma: fsl-edma: add dma-channel-mask property description (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: don't explicitly disable clocks in .remove() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: drop unused module alias (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: configure tcd attr with separate src and dst settings (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: Remove redundant check in fsl_edma_free_chan_resources() (Albert Esteve) [RHEL-256890] - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests (Albert Esteve) [RHEL-256890] - i2c: imx: fix clock and pinctrl state inconsistency in runtime PM (Albert Esteve) [RHEL-256890] - i2c: imx: zero-initialize dma_slave_config for eDMA (Albert Esteve) [RHEL-256890] - i2c: imx: ensure no clock is generated after last read (Albert Esteve) [RHEL-256890] - i2c: imx: fix i2c issue when reading multiple messages (Albert Esteve) [RHEL-256890] - i2c: imx: preserve error state in block data length handler (Albert Esteve) [RHEL-256890] - redhat/configs: automotive: enable NXP_SAR_ADC as a module (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Avoid division by zero (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: zero-initialize dma_slave_config (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: fix division by zero in write_raw (Eric Chanudet) [RHEL-255233] - iio: adc: nxp-sar-adc: Fix DMA channel leak in trigger mode (Eric Chanudet) [RHEL-255233] - iio: buffer: Fix wait_queue not being removed (Eric Chanudet) [RHEL-255233] - iio: core: add separate lockdep class for info_exist_lock (Eric Chanudet) [RHEL-255233] - iio: adc: Add the NXP SAR ADC support for the s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - dt-bindings: iio: adc: Add the NXP SAR ADC for s32g2/3 platforms (Eric Chanudet) [RHEL-255233] - iio: core: Replace lockdep_set_class() + mutex_init() by combined call (Eric Chanudet) [RHEL-255233] - iio: core: Clean up device correctly on iio_device_alloc() failure (Eric Chanudet) [RHEL-255233] - iio: core: add missing mutex_destroy in iio_dev_release() (Eric Chanudet) [RHEL-255233] - iio: iio_format_list() should set stride=1 for IIO_VAL_CHAR (Eric Chanudet) [RHEL-255233] - iio: backend: fix out-of-bound write (Eric Chanudet) [RHEL-255233] - iio: introduce IIO_DECLARE_BUFFER_WITH_TS macros (Eric Chanudet) [RHEL-255233] - iio: make IIO_DMA_MINALIGN minimum of 8 bytes (Eric Chanudet) [RHEL-255233] - iio: backend: make sure to NULL terminate stack buffer (Eric Chanudet) [RHEL-255233] - iio: core: Rework claim and release of direct mode to work with sparse. (Eric Chanudet) [RHEL-255233] - iio: backend: fix wrong pointer passed to IS_ERR() (Eric Chanudet) [RHEL-255233] - iio: buffer: document iio_push_to_buffers_with_ts() (Eric Chanudet) [RHEL-255233] - iio: introduced iio_push_to_buffers_with_ts() that takes a data_total_len argument. (Eric Chanudet) [RHEL-255233] - iio: Drop iio_device_claim_direct_scoped() and related infrastructure (Eric Chanudet) [RHEL-255233] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256731] - watchdog: fix hrtimer start when pretimeout is zero (David Arcari) [RHEL-255348] - smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() (Paulo Alcantara) [RHEL-230559] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230559] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230559] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230559] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230559] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230559] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230559] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230559] - smb: client: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: server: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230559] - smb: server: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230559] - smb: server: let recv_done() queue a refill when the peer is low on credits (Paulo Alcantara) [RHEL-230559] - smb: server: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230559] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230559] {CVE-2026-31539} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254596] {CVE-2026-74556} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (Mika Penttilä) [RHEL-222461] {CVE-2026-23466} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222401] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222474] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222424] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221279] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222307] {CVE-2026-31479} - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222461] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Mika Penttilä) [RHEL-236579] {CVE-2026-68264} - mshv: Fix infinite fault loop on permission-denied GPA intercepts (Maxim Levitsky) [RHEL-245035] - mshv: Fix error handling in mshv_region_pin (Maxim Levitsky) [RHEL-245035] - mshv: Fix use-after-free in mshv_map_user_memory error path (Maxim Levitsky) [RHEL-245035] - mshv: pass struct mshv_user_mem_region by reference (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient root memory hypervisor statuses (Maxim Levitsky) [RHEL-245035] - mshv: Handle insufficient contiguous memory hypervisor status (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_deposit_memory helper functions (Maxim Levitsky) [RHEL-245035] - mshv: Introduce hv_result_needs_memory() helper function (Maxim Levitsky) [RHEL-245035] - mshv: Add SMT_ENABLED_GUEST partition creation flag (Maxim Levitsky) [RHEL-245035] - mshv: Add support for integrated scheduler (Maxim Levitsky) [RHEL-245035] - mshv: Add debugfs to view hypervisor statistics (Maxim Levitsky) [RHEL-245035] - mshv: Add data for printing stats page counters (Maxim Levitsky) [RHEL-245035] - mshv: Update hv_stats_page definitions (Maxim Levitsky) [RHEL-245035] - mshv: Always map child vp stats pages regardless of scheduler type (Maxim Levitsky) [RHEL-245035] - mshv: Improve mshv_vp_stats_map/unmap(), add them to mshv_root.h (Maxim Levitsky) [RHEL-245035] - mshv: Use typed hv_stats_page pointers (Maxim Levitsky) [RHEL-245035] - mshv: Ignore second stats page map result failure (Maxim Levitsky) [RHEL-245035] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-233037] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227502] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236113] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228006] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231756] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228943] {CVE-2026-63921} - af_unix: Set gc_in_progress to true in unix_gc(). (Davide Caratti) [RHEL-227544] {CVE-2026-53361} - af_unix: Give up GC if MSG_PEEK intervened. (Davide Caratti) [RHEL-227544] {CVE-2026-23394} - af_unix: Consolidate unix_schedule_gc() and wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Remove unix_tot_inflight. (Davide Caratti) [RHEL-227544] - af_unix: Refine wait_for_unix_gc(). (Davide Caratti) [RHEL-227544] - af_unix: Don't call wait_for_unix_gc() on every sendmsg(). (Davide Caratti) [RHEL-227544] - af_unix: Don't trigger GC from close() if unnecessary. (Davide Caratti) [RHEL-227544] - af_unix: Simplify GC state. (Davide Caratti) [RHEL-227544] - af_unix: Count cyclic SCC. (Davide Caratti) [RHEL-227544] - af_unix: Initialise scc_index in unix_add_edge(). (Davide Caratti) [RHEL-227544] - af_unix: Clean up #include under net/unix/. (Davide Caratti) [RHEL-227544] - af_unix: Explicitly include headers for non-pointer struct fields. (Davide Caratti) [RHEL-227544] - af_unix: Sort headers. (Davide Caratti) [RHEL-227544] - unix: fix up for "apparmor: add fine grained af_unix mediation" (Davide Caratti) [RHEL-227544] - af_unix: Move internal definitions to net/unix/. (Davide Caratti) [RHEL-227544] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190194] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190194] {CVE-2026-53246} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235912] {CVE-2025-68745} - lsm: hold cred_guard_mutex for lsm_set_self_attr() (Ricardo Robaina) [RHEL-226807] {CVE-2026-64111} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-231909] {CVE-2025-40149} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230672] {CVE-2026-53131} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228717] {CVE-2026-63889} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225792] {CVE-2026-46149} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188199] {CVE-2026-52924} - vhost: move vdpa group bound check to vhost_vdpa (CKI Backport Bot) [RHEL-174283] {CVE-2026-43248} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Use scoped_guard() to acquire the subsystem lock (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) clean up unused define and outdated comment (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Make it easier to add more devices (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Rely on subsystem locking (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) make regulator 'vs' support optional (Jared Kangas) [RHEL-255518] - hwmon: (ina226) Add support for SY24655 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for INA260 (Jared Kangas) [RHEL-255518] - hwmon: (ina2xx) Add support for has_alerts configuration flag (Jared Kangas) [RHEL-255518] - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (Jared Kangas) [RHEL-255518] - hwmon: Support guard() and scoped_guard for subsystem locks (Jared Kangas) [RHEL-255518] - hwmon: Serialize accesses in hwmon core (Jared Kangas) [RHEL-255518] - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241004] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243307] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243363] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245528] {CVE-2026-23172} - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246405] {CVE-2026-63869} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254105] - time/sched_clock: Export symbol for sched_clock register function (Eric Chanudet) [RHEL-255225] - clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path (Mattijs Korpershoek) [RHEL-255519] - configs: Add NXP timer Kconfig options for automotive builds (Mattijs Korpershoek) [RHEL-255519] - clocksource: move NXP timer selection to drivers/clocksource (Mattijs Korpershoek) [RHEL-255519] - arm64: dts: s32g: add PIT support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Prevent driver unbind (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/nxp-pit: Add NXP Automotive s32g2 / s32g3 support (Mattijs Korpershoek) [RHEL-255519] - ARM: imx: Kconfig: Adjust select after renamed config option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rename the VF PIT to NXP PIT (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Unify the function name for irq ack (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Consolidate calls to pit_*_disable/enable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate set counter function (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Enable and disable module on error (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate clocksource enable / disable (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Use the node name for the interrupt and timer names (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the PTLCVAL macro (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Register the clocksource from the driver (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Convert raw values to BIT macros (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Allocate the struct timer at init time (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Encapsulate the initialization of the cycles_per_jiffy (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Pass the cpu number as parameter (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Rework the base address usage (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Set the scene for multiple timers (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Add COMPILE_TEST option (Mattijs Korpershoek) [RHEL-255519] - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Mattijs Korpershoek) [RHEL-255519] - redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Mattijs Korpershoek) [RHEL-255516] - arm64: dts: s32g: Add device tree information for the OCOTP driver (Mattijs Korpershoek) [RHEL-255516] - nvmem: s32g-ocotp: Add driver for S32G OCOTP (Mattijs Korpershoek) [RHEL-255516] - dt-bindings: nvmem: Add the nxp,s32g-ocotp yaml file (Mattijs Korpershoek) [RHEL-255516] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-231041] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231041] {CVE-2026-63923} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244953] {CVE-2026-72102} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-241018] {CVE-2026-68143} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240243] {CVE-2026-68294} - ALSA: hda/tas2781: Fix device-0 reset issue and handle -EXDEV in block data processing (CKI Backport Bot) [RHEL-239776] - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-237211] {CVE-2026-68128} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-237201] {CVE-2026-68200} - netfilter: handle unreadable frags (CKI Backport Bot) [RHEL-234265] {CVE-2026-64414} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230631] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228700] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227727] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227086] {CVE-2026-53193} - hwrng: virtio: clamp device-reported used.len at copy_data() (CKI Backport Bot) [RHEL-225748] {CVE-2026-64456} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191611] {CVE-2026-53176} - soc: qcom: socinfo: Avoid out of bounds read of serial number (CKI Backport Bot) [RHEL-191223] {CVE-2024-58007} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260452] {CVE-2026-64534} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254491] {CVE-2026-74518} - redhat/configs: automotive: enable PWM_FSL_FTM as a module (Mattijs Korpershoek) [RHEL-255517] - arm64: dts: s32g: add PWM support for s32g2 and s32g3 (Mattijs Korpershoek) [RHEL-255517] - pwm: Add the S32G support in the Freescale FTM driver (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Drop driver local locking (Mattijs Korpershoek) [RHEL-255517] - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Mattijs Korpershoek) [RHEL-255517] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237164] {CVE-2026-68159} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-241107] {CVE-2026-68188} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-240892] {CVE-2026-68155} - redhat: look for secureboot-uki-virt in /etc (Jan Stancek) [RHEL-169478] - redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Simplify uki-virt signing (Jan Stancek) [RHEL-169478] - redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Jan Stancek) [RHEL-169478] - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-169478] - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228471] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228471] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228471] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228471] {CVE-2026-45894} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236849] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236786] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231825] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230408] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225496] {CVE-2026-63823} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264234] {CVE-2025-39964} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264371] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264303] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262556] {CVE-2026-89846} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260585] {CVE-2026-74569} - redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas) [RHEL-259788] - watchdog: s32g_wdt: remove incorrect options in watchdog_info struct (Jared Kangas) [RHEL-259788] - usb: chipidea: fix usage_count leak when autosuspend_delay is negative (Jared Kangas) [RHEL-259788] - usb: chipidea: core: convert ci_role_switch to local variable (Jared Kangas) [RHEL-259788] - usb: chipidea: otg: not wait vbus drop if use role_switch (Jared Kangas) [RHEL-259788] - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change (Jared Kangas) [RHEL-259788] - rtc: pcf85063: fix incorrect maximum clock rate handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix resume error handling (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume (Jared Kangas) [RHEL-259788] - mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) (Jared Kangas) [RHEL-259788] - i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) (Jared Kangas) [RHEL-259788] - i2c: imx: Cancel hrtimer before clearing slave pointer (Jared Kangas) [RHEL-259788] - i2c: imx: Fix slave registration race and error handling (Jared Kangas) [RHEL-259788] - i2c: imx: mark I2C adapter when hardware is powered down (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix cache_only and IRQ state on restore_context() failure (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock (Jared Kangas) [RHEL-259788] - gpio: pca953x: drop bitmap_complement() where feasible (Jared Kangas) [RHEL-259788] - gpio: pca953x: enable latch only on edge-triggered inputs (Jared Kangas) [RHEL-259788] - gpio: pca953x: handle short interrupt pulses on PCAL devices (Jared Kangas) [RHEL-259788] - gpio: pca953x: Add support for level-triggered interrupts (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix wrong error probe return value (Jared Kangas) [RHEL-259788] - gpio: pca953x: fix IRQ storm on system wake up (Jared Kangas) [RHEL-259788] - gpio: pca953x: log an error when failing to get the reset GPIO (Jared Kangas) [RHEL-259788] - gpio: pca953x: Improve interrupt support (Jared Kangas) [RHEL-259788] - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258024] {CVE-2026-72243} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253205] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189638] {CVE-2026-23007} - block: always allocate integrity buffer when required (Jeff Moyer) [RHEL-189638] - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232375] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230292] {CVE-2026-63802} - bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (CKI Backport Bot) [RHEL-247283] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236084] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234288] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231034] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216247] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-190036] {CVE-2026-53266} - module.lds,codetag: force 0 sh_addr for sections (Joe Lawrence) [RHEL-159298] - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-242509] {CVE-2026-68121} - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263403] {CVE-2026-89481} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229262] {CVE-2026-53005} - af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). (Davide Caratti) [RHEL-229262] - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255860] {CVE-2026-80714} - drm/amdgpu/vce: fix integer overflow in image size (Mika Penttilä) [RHEL-257136] {CVE-2026-68108} - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (Mika Penttilä) [RHEL-237844] {CVE-2026-68257} - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236300] {CVE-2026-68266} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229327] {CVE-2026-64098} - drm/amdgpu/userq: fix access to stale wptr mapping (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (Mika Penttilä) [RHEL-225409] {CVE-2026-46311} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236714] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237962] {CVE-2026-68267} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229371] {CVE-2026-53290} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Mika Penttilä) [RHEL-225316] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225316] {CVE-2026-46230} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226047] {CVE-2026-46204} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Mika Penttilä) [RHEL-250108] {CVE-2025-40323} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Mika Penttilä) [RHEL-225444] {CVE-2026-46199} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Jerry Snitselaar) [RHEL-252331] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Jerry Snitselaar) [RHEL-252331] - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230647] {CVE-2026-53203} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-169081] {CVE-2025-68285} - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169079] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169072] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169068] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169064] {CVE-2025-71116} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - bnxt_en: fix DMA mapping length for padded small packets - ceph: give up on paths longer than PATH_MAX {CVE-2024-53685} - ceph: fix memory leaks in ceph_mdsc_build_path() {CVE-2026-43419} - ceph: add a bunch of missing ceph_path_info initializers {CVE-2026-43408} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-280590] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-280590] {CVE-2026-99999} - signal: Prevent exec() race (Phil Auld) [RHEL-282048] {CVE-2026-98256} - posix-timers: Target group sigqueue to current task only if not exiting (Phil Auld) [RHEL-282048] - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282070] {CVE-2026-98260} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271291] {CVE-2026-89631} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271484] {CVE-2026-89633} - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256678] - xfrm: nat_keepalive: avoid double free on send error (CKI Backport Bot) [RHEL-256678] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256678] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256678] - drivers/hv: remove deposited pages from direct map (Paolo Bonzini) [RHEL-267038] - selftests/mm: hugepage-mremap: fix mapping alignment (Luiz Capitulino) [RHEL-181987] - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254315] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-254315] {CVE-2026-89479} - sctp: avoid auth_enable sysctl UAF during netns teardown (Xin Long) [RHEL-258778] {CVE-2026-68162} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254353] {CVE-2026-74588} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259412] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259412] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259412] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259412] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259412] {CVE-2026-63961} - redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas) [RHEL-257228] - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254672] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253867] {CVE-2026-31678} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228912] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238046] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229479] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231579] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236158] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237097] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237097] {CVE-2026-68300} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245336] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245336] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245336] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245336] - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222980] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271473] {CVE-2026-80985} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275057] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275073] {CVE-2026-93228} - nfsd: don't free session slots that are still in use (Olga Kornievskaia) [RHEL-270850] {CVE-2026-89689} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270946] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270946] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271459] {CVE-2026-89526} - ice: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: send MAC change request synchronously (Jose Ignacio Tornos Martinez) [RHEL-143410] - i40e: skip unnecessary VF reset when setting trust (Jose Ignacio Tornos Martinez) [RHEL-143410] - iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test (Jose Ignacio Tornos Martinez) [RHEL-143410] - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262501] {CVE-2026-89894} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261677] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260529] {CVE-2026-68140} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CKI Backport Bot) [RHEL-259554] {CVE-2026-64030} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259316] {CVE-2026-63899} - netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (Phil Sutter) [RHEL-230721] {CVE-2026-45859} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256452] {CVE-2026-74641} - dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CKI Backport Bot) [RHEL-254620] {CVE-2026-74574} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243402] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243402] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243402] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243402] {CVE-2026-31647} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244763] {CVE-2026-63974} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240917] {CVE-2026-68377} - bridge: mcast: Fix a possible use-after-free when removing a bridge port (CKI Backport Bot) [RHEL-232531] {CVE-2026-64032} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229655] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226492] {CVE-2026-53011} - ionic: convert to ndo_hwtstamp API (CKI Backport Bot) [RHEL-165657] - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276363] {CVE-2026-89970} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226827] {CVE-2026-43332} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273900] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273875] {CVE-2026-64508} - tls: Preserve sk_err across recvmsg() when data has been copied (Valentin Schneider) [RHEL-275027] - net: tls: prevent chain-after-chain in plain text SG (Valentin Schneider) [RHEL-275027] - net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Valentin Schneider) [RHEL-275027] - net: tls: fix silent data drop under pipe back-pressure (Valentin Schneider) [RHEL-275027] - net: tls: fix strparser anchor skb leak on offload RX setup failure (Valentin Schneider) [RHEL-275027] - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Valentin Schneider) [RHEL-275027] - tls: Purge async_hold in tls_decrypt_async_wait() (Valentin Schneider) [RHEL-275027] - tls: Fix race condition in tls_sw_cancel_work_tx() (Valentin Schneider) [RHEL-275027] - af_unix: Unlink scc_entry in unix_del_edge(). (CKI Backport Bot) [RHEL-270654] {CVE-2026-80521} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263802] {CVE-2026-68123} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226678] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261989] {CVE-2026-72318} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259796] {CVE-2026-64385} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252479] {CVE-2026-72289} - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232114] {CVE-2026-64191} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-273805] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-273805] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-273805] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-273805] - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268127] {CVE-2026-74705} - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264930] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187745] {CVE-2026-89530} - nfsd: fix stale s2s_cp_stateids IDR entry for async COPY (Roberto Bergantinos Corpas) [RHEL-264798] {CVE-2026-89676} - nfsd: fix UAF in async copy cancel and shutdown (Roberto Bergantinos Corpas) [RHEL-264749] {CVE-2026-89675} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264168] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264134] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264134] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264134] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259243] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261492] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254268] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254268] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254268] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246118] {CVE-2026-23103} - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229037] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232860] {CVE-2026-53365} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192289] {CVE-2026-53360} - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232273] {CVE-2026-64115} - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (CKI Backport Bot) [RHEL-212709] - mlxbf-bootctl: Support sysfs entries for RTC battery status (CKI Backport Bot) [RHEL-212709] - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (CKI Backport Bot) [RHEL-212709] - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227035] {CVE-2026-64035} - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271653] {CVE-2026-93288} - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Davide Caratti) [RHEL-231698] {CVE-2026-64024} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232645] {CVE-2026-46275} - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269475] {CVE-2026-90227} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270934] {CVE-2026-89972} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270888] - ipv6: ioam: refresh hdr pointer before ioam6_event() (Prasenjit Mukherjee) [RHEL-259773] {CVE-2026-64132} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270657] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259063] {CVE-2026-52972} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Filip Balluch) [RHEL-257457] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Filip Balluch) [RHEL-257457] - wifi: mac80211: allow keys to driver with fips exception (Filip Balluch) [RHEL-257457] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Filip Balluch) [RHEL-257457] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263469] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263469] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263469] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263469] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263469] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263469] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263469] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263469] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263469] - ipvs: reload ip header after head reallocation (CKI Backport Bot) [RHEL-263870] {CVE-2026-68476} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258672] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259369] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259404] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231288] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225393] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231359] {CVE-2026-64557} - l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (Abhishek Rawal) [RHEL-227466] {CVE-2026-63918} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230778] {CVE-2026-63992} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259564] {CVE-2026-63994} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-239729] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247005] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247054] {CVE-2026-63829} - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229761] {CVE-2026-53357} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261255] {CVE-2026-72320} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258155] {CVE-2026-80921} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Add a helper to look up the max physical ID for AVIC (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids (CKI Backport Bot) [RHEL-254525] {CVE-2026-74516} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254392] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252430] {CVE-2026-72255} - netfilter: x_tables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: close dangling table module init race (Phil Sutter) [RHEL-243394] - netfilter: ebtables: move to two-stage removal scheme (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xtables_unregister_table_exit (Phil Sutter) [RHEL-243394] {CVE-2026-64078} - netfilter: x_tables: unregister the templates first (Phil Sutter) [RHEL-243394] - netfilter: x_tables: add and use xt_unregister_table_pre_exit (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allocate hook ops while under mutex (Phil Sutter) [RHEL-243394] - netfilter: x_tables: allow initial table replace without emitting audit log message (Phil Sutter) [RHEL-243394] - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250538] {CVE-2026-74746} - packet: use consistent hard_header_len in TX_RING send path (Toke Høiland-Jørgensen) [RHEL-244537] - packet: use consistent hard_header_len in non-ring send paths (Toke Høiland-Jørgensen) [RHEL-244537] {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Toke Høiland-Jørgensen) [RHEL-244537] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232598] {CVE-2026-45856} - netfilter: nf_conncount: increase the connection clean up limit to 64 (CKI Backport Bot) [RHEL-232220] {CVE-2026-45860} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225996] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214949] {CVE-2026-63794} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034} - gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261] - gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261] - gve: Use generic power management (Michal Schmidt) [RHEL-219261] - gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261] - gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261] - gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261] - gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261] - gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261] - gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261] - gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261] - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261] - gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261] - gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261] - gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261] - net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261] - gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261] - gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261] - gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261] - gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261] - gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261] - gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261] - gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261] - gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261] - gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261] - gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261] - gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261] - gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261] - gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261] - gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261] - gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261] - gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261] - gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261] - gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261] - gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261] - gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261] - gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261] - gve: global: fix "for a while" typo (Michal Schmidt) [RHEL-219261] - gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261] - gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261] - gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261] - gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261] - gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261] - gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261] - gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261] - gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261] - gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261] - gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261] - gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261] - gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261] - gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261] - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261] - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL-219261] - gve: handle overflow when reporting TX consumed descriptors (Michal Schmidt) [RHEL-219261] - gve: add XDP DROP and PASS support for DQ (Michal Schmidt) [RHEL-219261] - gve: update XDP allocation path support RX buffer posting (Michal Schmidt) [RHEL-219261] - gve: merge packet buffer size fields (Michal Schmidt) [RHEL-219261] - gve: update GQ RX to use buf_size (Michal Schmidt) [RHEL-219261] - gve: introduce config-based allocation for XDP (Michal Schmidt) [RHEL-219261] - gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Michal Schmidt) [RHEL-219261] - gve: unlink old napi only if page pool exists (Michal Schmidt) [RHEL-219261] - gve: convert to use netmem for DQO RDA mode (Michal Schmidt) [RHEL-219261] - gve: unlink old napi when stopping a queue using queue API (Michal Schmidt) [RHEL-219261] - gve: Add RSS cache for non RSS device option scenario (Michal Schmidt) [RHEL-219261] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Michal Schmidt) [RHEL-219261] - gve: fix XDP allocation path in edge cases (Michal Schmidt) [RHEL-219261] - gve: process XSK TX descriptors as part of RX NAPI (Michal Schmidt) [RHEL-219261] - gve: guard XSK operations on the existence of queues (Michal Schmidt) [RHEL-219261] - gve: guard XDP xmit NDO on existence of xdp queues (Michal Schmidt) [RHEL-219261] - gve: clean XDP queues in gve_tx_stop_ring_gqi (Michal Schmidt) [RHEL-219261] - gve: Convert timeouts to secs_to_jiffies() (Michal Schmidt) [RHEL-219261] - gve: Remove unused gve_adminq_set_mtu (Michal Schmidt) [RHEL-219261] - gve: Flow steering trigger reset only for timeout error (Michal Schmidt) [RHEL-219261] - gve: change to use page_pool_put_full_page when recycling pages (Michal Schmidt) [RHEL-219261] - gve: add support for basic queue stats (Michal Schmidt) [RHEL-219261] - gve: adopt page pool for DQ RDA mode (Michal Schmidt) [RHEL-219261] - gve: move DQO rx buffer management related code to a new file (Michal Schmidt) [RHEL-219261] - gve: Map NAPI instances to queues (Michal Schmidt) [RHEL-219261] - gve: Map IRQs to NAPI instances (Michal Schmidt) [RHEL-219261] - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258812] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250496] {CVE-2026-64556} - perf/core: Fix missing read event generation on task exit (Anubhav Shelat) [RHEL-250496] - KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation (Gavin Shan) [RHEL-261954] {CVE-2026-89775} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Gavin Shan) [RHEL-227043] {CVE-2026-46317} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263335] {CVE-2026-89480} - x86/mm/ident_map: Fix theoretical virtual address overflow to zero (Mark Langsdorf) [RHEL-260402] - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231396] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-254943] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254306] {CVE-2026-80522} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252817] {CVE-2026-68299} - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188661] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188661] - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CKI Backport Bot) [RHEL-227378] {CVE-2026-46076} - ext4: fix e4b bitmap inconsistency reports (CKI Backport Bot) [RHEL-225949] {CVE-2026-45942} - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - selftests: kvm: Verify TILELOADD actually #NM faults when XFD[18]=1 (Maxim Levitsky) [RHEL-148618] - selftests: kvm: try getting XFD and XSAVE state out of sync (Maxim Levitsky) [RHEL-148618] - selftests: kvm: replace numbered sync points with actions (Maxim Levitsky) [RHEL-148618] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add ex_str() to print human friendly name of exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define AMD's #HV, #VC, and #SX exception vectors (Maxim Levitsky) [RHEL-148618] - KVM: x86: Define Control Protection Exception (#CP) vector (Maxim Levitsky) [RHEL-148618] - KVM: x86: Add human friendly formatting for #XM, and #VE (Maxim Levitsky) [RHEL-148618] - KVM: selftests: Add support for #DE exception fixup (Maxim Levitsky) [RHEL-148618] - idpf: export RX hardware timestamping information to XDP (Michal Schmidt) [RHEL-136674] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - redhat/configs: enable keyboard GPIO for x86 (Mark Langsdorf) [RHEL-147908] - redhat/configs: enable CONFIG_INPUT_SOC_BUTTON_ARRAY on x86 (Mark Langsdorf) [RHEL-135367] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-145800] - selftests/bpf: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - bpf: crypto: Use the correct destructor kfunc type (Viktor Malik) [RHEL-113714] - PCI: vmd: Override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Myron Stowe) [RHEL-143521] - PCI: vmd: Add VMD Device ID Support for Panther Lake (PTL)-H/P/U (Myron Stowe) [RHEL-143521] - net: vlan: don't propagate flags on open (Hangbin Liu) [RHEL-149691] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment() and tcp_clone_payload(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - Debrand for AlmaLinux OS - Use AlmaLinux OS secure boot cert - Enable Btrfs support for all kernel variants - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Set version to 6.12.0-211.7.1.el10_2 (Andrew Lukoshko) - kabi: enable check-kabi (Čestmír Kalina) - kabi: add symbols to stablelist (Čestmír Kalina) - Merge tag 'kernel-6.12.0-211.7.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.6.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.5.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.4.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.3.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.2.1.el10_2' into main (Scott Weaver) - Merge tag 'kernel-6.12.0-211.1.1.el10_2' into main (Scott Weaver) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153673] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153673] - platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Validate event/enable input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (David Thompson) [RHEL-104053] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (David Thompson) [RHEL-104053] - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112270] - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154415] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154415] - bonding: fix use-after-free due to enslave fail after slave array update (Hangbin Liu) [RHEL-152392] {CVE-2026-23171} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150133] {CVE-2026-23191} - allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243} - iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546] - IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936] - efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156} - powerpc, perf: Check that current->mm is alive before getting user callchain (Michael Petlan) [RHEL-145265] - accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722] - accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144} - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323] - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323] - mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632] - mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632] - mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632] - mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632] - mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632] - mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632] - mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632] - mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632] - mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632] - mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632] - mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632] - mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632] - mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632] - mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632] - mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632] - mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632] - mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632] - mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632] - mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632] - mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632] - mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632] - mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632] - mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632] - mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632] - hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632] - mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632] - mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632] - mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632] - mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632] - mshv: Only map vp->vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632] - mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632] - mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632] - ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120700] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111} - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209} - smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652] - smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652] - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097} - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Remove RSA-MD from License tag - Resolves: RHEL-35725 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Replace and obsolete mailx - Add licenses to fully conform to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix s-nail installation without docs - Resolves: rhbz#2188620 - Fix s-nail makeflags - Resolves: rhbz#2171723 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - rebased to 2.40.0 (RHEL-100438) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829) - Secure Execution: Add tool to verify host-key documents (RHEL-136795) - Resolves: RHEL-100438 RHEL-71829 RHEL-136795 - rebased to 2.39.0 (RHEL-100438) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744) - zipl: makedumpfile is required for ngdump support (RHEL-114661) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884) - chpstat: Fix DPU utilization scaling in reports (RHEL-109214) - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214 - cpi: Disable CPI for SEL guests by default (RHEL-76930) - Resolves: RHEL-76930 - rebased to 2.38.0 (RHEL-73341) - LPAR level power consumption reporting (RHEL-72677) - Provide Topology-Map information to userspace (RHEL-72680) - Add CCK secret type for updating the Customer Communication Key (RHEL-73023) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389) - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389 - pvimg/genprotimg: Fix confidential dump support (RHEL-76913) - Resolves: RHEL-76913 - rebased to 2.36.0 (RHEL-59086) - cpacfinfo: new tool to provide CPACF information (RHEL-23869) - chpstat: Additional Channel Measurements (RHEL-23875) - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153) - KVM: Support extended attestation for Secure Execution (RHEL-27472) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108) - Vertical CPU Polarization Support Stage 2 (RHEL-64704) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851) - KVM: Rewrite genprotimg in Rust (RHEL-72022) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894) - zkey key support for dm-crypt with XTS keys (RHEL-23870) - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebased to 2.35.0 (RHEL-59086) - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873) - Resolves: RHEL-59086 RHEL-23873 - rebased to 2.33.1 (RHEL-23874) - Resolves: RHEL-23874 - Bump release for June 2024 mass rebuild - Backport 10 upstream s390-tools fixes: hsci: automatically set appropriate MTU for HSCI hyptop/opts: replace sort_field option and fix long option abbreviations zipl/boot: fix stage3 secure boot trailer placement zipl/src: fixes for replicated program tables, component location alignment, verbose output and add_component_file_range() - rebased to 2.40.0 (RHEL-100438) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829) - Secure Execution: Add tool to verify host-key documents (RHEL-136795) - Resolves: RHEL-100438 RHEL-71829 RHEL-136795 - rebased to 2.39.0 (RHEL-100438) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744) - zipl: makedumpfile is required for ngdump support (RHEL-114661) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884) - chpstat: Fix DPU utilization scaling in reports (RHEL-109214) - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214 - cpi: Disable CPI for SEL guests by default (RHEL-76930) - Resolves: RHEL-76930 - rebased to 2.38.0 (RHEL-73341) - LPAR level power consumption reporting (RHEL-72677) - Provide Topology-Map information to userspace (RHEL-72680) - Add CCK secret type for updating the Customer Communication Key (RHEL-73023) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389) - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389 - pvimg/genprotimg: Fix confidential dump support (RHEL-76913) - Resolves: RHEL-76913 - rebased to 2.36.0 (RHEL-59086) - cpacfinfo: new tool to provide CPACF information (RHEL-23869) - chpstat: Additional Channel Measurements (RHEL-23875) - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153) - KVM: Support extended attestation for Secure Execution (RHEL-27472) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108) - Vertical CPU Polarization Support Stage 2 (RHEL-64704) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851) - KVM: Rewrite genprotimg in Rust (RHEL-72022) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894) - zkey key support for dm-crypt with XTS keys (RHEL-23870) - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebased to 2.35.0 (RHEL-59086) - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873) - Resolves: RHEL-59086 RHEL-23873 - rebased to 2.40.0 (RHEL-100438) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829) - Secure Execution: Add tool to verify host-key documents (RHEL-136795) - Resolves: RHEL-100438 RHEL-71829 RHEL-136795 - rebased to 2.39.0 (RHEL-100438) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744) - zipl: makedumpfile is required for ngdump support (RHEL-114661) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884) - chpstat: Fix DPU utilization scaling in reports (RHEL-109214) - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214 - cpi: Disable CPI for SEL guests by default (RHEL-76930) - Resolves: RHEL-76930 - rebased to 2.38.0 (RHEL-73341) - LPAR level power consumption reporting (RHEL-72677) - Provide Topology-Map information to userspace (RHEL-72680) - Add CCK secret type for updating the Customer Communication Key (RHEL-73023) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389) - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389 - pvimg/genprotimg: Fix confidential dump support (RHEL-76913) - Resolves: RHEL-76913 - rebased to 2.36.0 (RHEL-59086) - cpacfinfo: new tool to provide CPACF information (RHEL-23869) - chpstat: Additional Channel Measurements (RHEL-23875) - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153) - KVM: Support extended attestation for Secure Execution (RHEL-27472) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108) - Vertical CPU Polarization Support Stage 2 (RHEL-64704) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851) - KVM: Rewrite genprotimg in Rust (RHEL-72022) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894) - zkey key support for dm-crypt with XTS keys (RHEL-23870) - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebased to 2.35.0 (RHEL-59086) - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873) - Resolves: RHEL-59086 RHEL-23873 - rebased to 2.33.1 (RHEL-23874) - Resolves: RHEL-23874 - Bump release for June 2024 mass rebuild - Backport 10 upstream s390-tools fixes: hsci: automatically set appropriate MTU for HSCI hyptop/opts: replace sort_field option and fix long option abbreviations zipl/boot: fix stage3 secure boot trailer placement zipl/src: fixes for replicated program tables, component location alignment, verbose output and add_component_file_range() - rebased to 2.40.0 (RHEL-100438) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent (RHEL-71829) - Secure Execution: Add tool to verify host-key documents (RHEL-136795) - Resolves: RHEL-100438 RHEL-71829 RHEL-136795 - rebased to 2.39.0 (RHEL-100438) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744) - zipl: makedumpfile is required for ngdump support (RHEL-114661) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884) - chpstat: Fix DPU utilization scaling in reports (RHEL-109214) - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214 - cpi: Disable CPI for SEL guests by default (RHEL-76930) - Resolves: RHEL-76930 - rebased to 2.38.0 (RHEL-73341) - LPAR level power consumption reporting (RHEL-72677) - Provide Topology-Map information to userspace (RHEL-72680) - Add CCK secret type for updating the Customer Communication Key (RHEL-73023) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389) - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389 - pvimg/genprotimg: Fix confidential dump support (RHEL-76913) - Resolves: RHEL-76913 - rebased to 2.36.0 (RHEL-59086) - cpacfinfo: new tool to provide CPACF information (RHEL-23869) - chpstat: Additional Channel Measurements (RHEL-23875) - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153) - KVM: Support extended attestation for Secure Execution (RHEL-27472) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108) - Vertical CPU Polarization Support Stage 2 (RHEL-64704) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851) - KVM: Rewrite genprotimg in Rust (RHEL-72022) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894) - zkey key support for dm-crypt with XTS keys (RHEL-23870) - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebased to 2.35.0 (RHEL-59086) - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873) - Resolves: RHEL-59086 RHEL-23873 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-132975 - Update to version 4.23.4 - resolves: RHEL-114545 - Update to version 4.23.4 - resolves: RHEL-132338 - Fix Time Machine backup - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-267435 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-132975 - Update to version 4.23.4 - resolves: RHEL-114545 - Update to version 4.23.4 - resolves: RHEL-132338 - Fix Time Machine backup - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-267435 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-132975 - Update to version 4.23.4 - resolves: RHEL-114545 - Update to version 4.23.4 - resolves: RHEL-132338 - Fix Time Machine backup - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-267435 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-132975 - Update to version 4.23.4 - resolves: RHEL-114545 - Update to version 4.23.4 - resolves: RHEL-132338 - Fix Time Machine backup - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-267435 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-132975 - Update to version 4.23.4 - resolves: RHEL-114545 - Update to version 4.23.4 - resolves: RHEL-132338 - Fix Time Machine backup - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-267435 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-132975 - Update to version 4.23.4 - resolves: RHEL-114545 - Update to version 4.23.4 - resolves: RHEL-132338 - Fix Time Machine backup - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Update to version 4.23.5 - resolves: RHEL-138263 - Fix winbind group resolution - resolves: RHEL-141012 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144479 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-267435 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180758 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169668 - Fix samba automount triggering for more file systems - resolves: RHEL-137446 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150820 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147417 - Fix samba-bgqd to load [printers] share - resolves: RHEL-53167 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144586 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fix FTBFS - applied accepted license exception - SANE-exception - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - move to meson - 2165612 - IPP-USB as a weak dependency of CUPS and sane-airscan - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building against libxml2 2.12.0 - applied accepted license exception - SANE-exception - SPDX migration and rescan completed - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - hyphen is not allowed in RPM, use underscore - flatpak doesn't want systemd only in runtime - add bcond for systemd - used in flatpak - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building against libxml2 2.12.0 - applied accepted license exception - SANE-exception - SPDX migration and rescan completed - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - hyphen is not allowed in RPM, use underscore - flatpak doesn't want systemd only in runtime - add bcond for systemd - used in flatpak - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building against libxml2 2.12.0 - applied accepted license exception - SANE-exception - SPDX migration and rescan completed - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - hyphen is not allowed in RPM, use underscore - flatpak doesn't want systemd only in runtime - add bcond for systemd - used in flatpak - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building against libxml2 2.12.0 - applied accepted license exception - SANE-exception - SPDX migration and rescan completed - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - hyphen is not allowed in RPM, use underscore - flatpak doesn't want systemd only in runtime - add bcond for systemd - used in flatpak - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building against libxml2 2.12.0 - applied accepted license exception - SANE-exception - SPDX migration and rescan completed - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - hyphen is not allowed in RPM, use underscore - flatpak doesn't want systemd only in runtime - add bcond for systemd - used in flatpak - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building against libxml2 2.12.0 - applied accepted license exception - SANE-exception - SPDX migration and rescan completed - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - hyphen is not allowed in RPM, use underscore - flatpak doesn't want systemd only in runtime - add bcond for systemd - used in flatpak - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building against libxml2 2.12.0 - applied accepted license exception - SANE-exception - SPDX migration and rescan completed - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - hyphen is not allowed in RPM, use underscore - flatpak doesn't want systemd only in runtime - add bcond for systemd - used in flatpak - new upstream release - new upstream release - restore useradd and groupadd in place of sysusers rpm macros - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - new nodelay flag for add_lockspace - new upstream release - fix install of sanlock.sysusers - fix invalid strcpy in direct dump - new upstream release, adopt sysusers, drop python bindings - Bump release for June 2024 mass rebuild - new upstream release - new upstream release - restore useradd and groupadd in place of sysusers rpm macros - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - new nodelay flag for add_lockspace - new upstream release - fix install of sanlock.sysusers - fix invalid strcpy in direct dump - new upstream release, adopt sysusers, drop python bindings - Bump release for June 2024 mass rebuild - Bump release to address sbc-devel inclusion to CRB Resolves: RHEL-105436 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for rebuild against pacemaker-3.0.0-rc1 package Resolves: RHEL-68410 Resolves: RHEL-67387 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - rebase to upstream v1.5.2 - convert license naming to SPDX - make static analysis happy with a few checks & rearanges with dynamic-memory-management - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add support for Image Mode Resolves: RHEL-132484 - Disable test subpackage - Bump release for rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add sysusers.d config file to allow rpm to create users/groups automatically and drop attempt to delete group Related: RHEL-114454 - Add support for Image Mode Resolves: RHEL-114454 - Support added for post-quantum cryptography Resolves: RHEL-93092 - Bump release for rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix bogus date in changelog, use autopatch - Add pointer casts for GCC 14/C89 compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Add downstream patch to fix c99 incompatibilities - https://fedoraproject.org/wiki/Changes/PortingToModernC - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add AlmaLinux 10 support - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300) - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722) - Corrected version in the description of CIS profiles (RHEL-143955) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059) - Bump version and rebuild - Update to the latest upstream release (RHEL-135774) - rebase scap-security-guide to the latest version 0.1.78 (RHEL-120076) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Rebase scap-security-guide to the latest upstream version 0.1.77 (RHEL-94804) - rebuilt - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74239) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add AlmaLinux 10 support - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300) - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722) - Corrected version in the description of CIS profiles (RHEL-143955) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059) - Bump version and rebuild - Update to the latest upstream release (RHEL-135774) - rebase scap-security-guide to the latest version 0.1.78 (RHEL-120076) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Rebase scap-security-guide to the latest upstream version 0.1.77 (RHEL-94804) - rebuilt - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74239) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add AlmaLinux 10 support - Rebase scap-security-guide to 0.1.81 (RHEL-180768) - Rules *xccdf_org.ssgproject.content_rule_file_permission_user_init_files* and *xccdf_org.ssgproject.content_rule_file_permission_user_init_files_root* were updated to include text instructions on how to perform the remediation without losing previously set permissions on files that are not compliant. (RHEL-150283) - Enabled specifying a custom text (including newlines) in multiple rules checking login banners (RHEL-118499) - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300) - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722) - Corrected version in the description of CIS profiles (RHEL-143955) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059) - Bump version and rebuild - Update to the latest upstream release (RHEL-135774) - rebase scap-security-guide to the latest version 0.1.78 (RHEL-120076) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Rebase scap-security-guide to the latest upstream version 0.1.77 (RHEL-94804) - rebuilt - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74239) - Add AlmaLinux 10 support - Resolve dropped changelog entry - Rebase scap-security-guide to 0.1.82 in RHEL 10.2.z (RHEL-242530) - Explicitly set file owner and permissions when creating new files or directories (RHEL-182657) - Add a rationale text for rule package_sssd_installed (RHEL-178437) - Align RHEL 10 STIG profile with official RHEL 10 DISA STIG V1R2 (RHEL-164451) - Rebase scap-security-guide to 0.1.81 (RHEL-180768) - Rules *xccdf_org.ssgproject.content_rule_file_permission_user_init_files* and *xccdf_org.ssgproject.content_rule_file_permission_user_init_files_root* were updated to include text instructions on how to perform the remediation without losing previously set permissions on files that are not compliant. (RHEL-150283) - Enabled specifying a custom text (including newlines) in multiple rules checking login banners (RHEL-118499) - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300) - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722) - Corrected version in the description of CIS profiles (RHEL-143955) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059) - Bump version and rebuild - Update to the latest upstream release (RHEL-135774) - rebase scap-security-guide to the latest version 0.1.78 (RHEL-120076) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Rebase scap-security-guide to the latest upstream version 0.1.77 (RHEL-94804) - Add AlmaLinux 10 support - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300) - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722) - Corrected version in the description of CIS profiles (RHEL-143955) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059) - Bump version and rebuild - Update to the latest upstream release (RHEL-135774) - rebase scap-security-guide to the latest version 0.1.78 (RHEL-120076) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Rebase scap-security-guide to the latest upstream version 0.1.77 (RHEL-94804) - rebuilt - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74239) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add AlmaLinux 10 support - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300) - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722) - Corrected version in the description of CIS profiles (RHEL-143955) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059) - Bump version and rebuild - Update to the latest upstream release (RHEL-135774) - rebase scap-security-guide to the latest version 0.1.78 (RHEL-120076) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Rebase scap-security-guide to the latest upstream version 0.1.77 (RHEL-94804) - rebuilt - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74239) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add AlmaLinux 10 support - Rebase scap-security-guide to 0.1.81 (RHEL-180768) - Rules *xccdf_org.ssgproject.content_rule_file_permission_user_init_files* and *xccdf_org.ssgproject.content_rule_file_permission_user_init_files_root* were updated to include text instructions on how to perform the remediation without losing previously set permissions on files that are not compliant. (RHEL-150283) - Enabled specifying a custom text (including newlines) in multiple rules checking login banners (RHEL-118499) - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300) - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722) - Corrected version in the description of CIS profiles (RHEL-143955) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059) - Bump version and rebuild - Update to the latest upstream release (RHEL-135774) - rebase scap-security-guide to the latest version 0.1.78 (RHEL-120076) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Rebase scap-security-guide to the latest upstream version 0.1.77 (RHEL-94804) - rebuilt - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74239) - Add AlmaLinux 10 support - Resolve dropped changelog entry - Rebase scap-security-guide to 0.1.82 in RHEL 10.2.z (RHEL-242530) - Explicitly set file owner and permissions when creating new files or directories (RHEL-182657) - Add a rationale text for rule package_sssd_installed (RHEL-178437) - Align RHEL 10 STIG profile with official RHEL 10 DISA STIG V1R2 (RHEL-164451) - Rebase scap-security-guide to 0.1.81 (RHEL-180768) - Rules *xccdf_org.ssgproject.content_rule_file_permission_user_init_files* and *xccdf_org.ssgproject.content_rule_file_permission_user_init_files_root* were updated to include text instructions on how to perform the remediation without losing previously set permissions on files that are not compliant. (RHEL-150283) - Enabled specifying a custom text (including newlines) in multiple rules checking login banners (RHEL-118499) - Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300) - Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722) - Corrected version in the description of CIS profiles (RHEL-143955) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059) - Bump version and rebuild - Update to the latest upstream release (RHEL-135774) - rebase scap-security-guide to the latest version 0.1.78 (RHEL-120076) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Rebase scap-security-guide to the latest upstream version 0.1.77 (RHEL-94804) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump NVR to maintain upgrade path with RHEL 9 Related: RHEL-52633 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to 2.0.3 - add upstream patch to fix brp-python-hardlink path - use SPDX license ID - run upstream tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Support F35+ "brp-python-hardlink" script location. Resolves: rhbz#2029959 - Rebuild against rpm-4.19 (https://fedoraproject.org/wiki/Changes/RPM-4.19) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump NVR to maintain upgrade path with RHEL 9 Related: RHEL-52633 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to 2.0.3 - add upstream patch to fix brp-python-hardlink path - use SPDX license ID - run upstream tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Support F35+ "brp-python-hardlink" script location. Resolves: rhbz#2029959 - Rebuild against rpm-4.19 (https://fedoraproject.org/wiki/Changes/RPM-4.19) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Use OpenSSL instead of libgcrypt Resolves: RHEL-55250 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.2.68 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix a hang in SDL_FreeYUVOverlay() (RH#2173510) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 1.2.60 - Update to 2.32.50 - Backport fixes from upstream + Correctly handle SDL environment variables + Fix to avoid over optimizing away internal strlen Resolves: RHEL-77078 Initial commit on c10s Resolves: RHEL-77078 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix the license which was validated by license-validate, but not by rpminspect - Move to SPDX license format - Add GCC 14 patches from upstream (RHEL-45224) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Port to C99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Replace "\_" (backslash underscore) with "_" (just underscore) Resolves: RHEL-171367 - Rebuild because of a missing target tag Resolves: RHEL-152308 - Rebuild for SELinux userspace 3.10 - Allow NetworkManager list bpf directories Resolves: RHEL-142171 - Dontaudit systemd-generator connect to sssd over a unix stream socket Resolves: RHEL-114886 - Allow pkcsslotd read files in /proc and /sys Resolves: RHEL-130812 - Allow pkcsslotd map its private tmpfs files Resolves: RHEL-130812 - Allow tlshd communication to unconfined_t over a tcp socket Resolves: RHEL-125106 - Label /run/insights-client.ppid with insights_client_run_t Resolves: RHEL-146687 - Allow NM nvme dispatcher script start systemd services Resolves: RHEL-140760 - Allow tlshd write generic certificate dirs Resolves: RHEL-127023 - Allow aide get attributes of tmpfs and devtmpfs filesystems Resolves: RHEL-121479 - Allow plasma login manager stop login services Resolves: RHEL-140911 - Rebuild selinux policy after installation of the extra package Resolves: RHEL-135875 Resolves: RHEL-143926 - Move triggerin scriptlets to the parent packages Resolves: RHEL-141813 - Rebuild policy before running {binsbin|varrun}-convert.sh Resolves: RHEL-141813 - Rebuild selinux policy after installation of the extra package Resolves: RHEL-135875 - Allow rhsmcertd read anaconda run files Resolves: RHEL-141391 - Allow mdadm to use CAP_BPF during RAID monitoring Resolves: RHEL-135765 - Allow mdadm the CAP_SYS_PTRACE capability Resolves: RHEL-135765 - Allow staff and sysadm execute iotop using sudo Resolves: RHEL-134940 - Allow kernel_t to read/write all domains' pipes Resolves: RHEL-124442 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148107 - Allow sshd-session inherit limits from its parent sshd process Resolves: RHEL-136673 - Revert "Allow sshd-session inherit limits from its parent process" Resolves: RHEL-136673 - Allow tlshd write generic certificates Resolves: RHEL-123737 - Allow systemd-hostnamed to create its Varlink socket Resolves: RHEL-139385 - Update gpg_role() interface with unix_stream_socket permissions Resolves: RHEL-128555 - Label /etc/aliases.cdb with etc_aliases_t Resolves: RHEL-109976 - Add aliases.lmdb to mta_filetrans_named_content() Resolves: RHEL-140884 - Update policy for bootupd Resolves: RHEL-141391 - Macros: Require only "stable" version of selinux-policy (RHEL-141423) - Allow hostapd write to socket files in /tmp Resolves: RHEL-77047 - Allow stap server read virtual memory sysctls Resolves: RHEL-114104 - Allow sshd-session inherit limits from its parent process Resolves: RHEL-136673 - Allow sshd noatsecure on sshd-session execution Resolves: RHEL-138247 - Allow sshd-net read and write to sshd vsock socket Related: RHEL-138247 - Update ktls policy Resolves: RHEL-123737 - Update policy for redfish-finder Resolves: RHEL-50299 - Allow sshd-session read, write, and map ica tmpfs files Resolves: RHEL-138247 - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t Resolves: RHEL-127721 - Allow stalld map sysfs files Resolves: RHEL-135512 - Allow aide get attributes of a filesystem with extended attributes Resolves: RHEL-121479 - Label miscellaneous /dev/papr-* devices Resolves: RHEL-129839 - Allow KDE Plasma Login Manager to function as a display manager Resolves: RHEL-135676 - Update specfile trigger for openwsmand Resolves: RHEL-133024 - Remove permissive domain for sshd_session_t and sshd_auth_t Resolves: RHEL-178897 - Replace "\_" (backslash underscore) with "_" (just underscore) Resolves: RHEL-171367 - Rebuild because of a missing target tag Resolves: RHEL-152308 - Rebuild for SELinux userspace 3.10 - Allow NetworkManager list bpf directories Resolves: RHEL-142171 - Dontaudit systemd-generator connect to sssd over a unix stream socket Resolves: RHEL-114886 - Allow pkcsslotd read files in /proc and /sys Resolves: RHEL-130812 - Allow pkcsslotd map its private tmpfs files Resolves: RHEL-130812 - Allow tlshd communication to unconfined_t over a tcp socket Resolves: RHEL-125106 - Label /run/insights-client.ppid with insights_client_run_t Resolves: RHEL-146687 - Allow NM nvme dispatcher script start systemd services Resolves: RHEL-140760 - Allow tlshd write generic certificate dirs Resolves: RHEL-127023 - Allow aide get attributes of tmpfs and devtmpfs filesystems Resolves: RHEL-121479 - Allow plasma login manager stop login services Resolves: RHEL-140911 - Rebuild selinux policy after installation of the extra package Resolves: RHEL-135875 Resolves: RHEL-143926 - Move triggerin scriptlets to the parent packages Resolves: RHEL-141813 - Rebuild policy before running {binsbin|varrun}-convert.sh Resolves: RHEL-141813 - Rebuild selinux policy after installation of the extra package Resolves: RHEL-135875 - Allow rhsmcertd read anaconda run files Resolves: RHEL-141391 - Allow mdadm to use CAP_BPF during RAID monitoring Resolves: RHEL-135765 - Allow mdadm the CAP_SYS_PTRACE capability Resolves: RHEL-135765 - Allow staff and sysadm execute iotop using sudo Resolves: RHEL-134940 - Allow kernel_t to read/write all domains' pipes Resolves: RHEL-124442 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148107 - Allow sshd-session inherit limits from its parent sshd process Resolves: RHEL-136673 - Revert "Allow sshd-session inherit limits from its parent process" Resolves: RHEL-136673 - Allow tlshd write generic certificates Resolves: RHEL-123737 - Allow systemd-hostnamed to create its Varlink socket Resolves: RHEL-139385 - Update gpg_role() interface with unix_stream_socket permissions Resolves: RHEL-128555 - Label /etc/aliases.cdb with etc_aliases_t Resolves: RHEL-109976 - Add aliases.lmdb to mta_filetrans_named_content() Resolves: RHEL-140884 - Update policy for bootupd Resolves: RHEL-141391 - Macros: Require only "stable" version of selinux-policy (RHEL-141423) - Allow hostapd write to socket files in /tmp Resolves: RHEL-77047 - Allow stap server read virtual memory sysctls Resolves: RHEL-114104 - Allow sshd-session inherit limits from its parent process Resolves: RHEL-136673 - Allow sshd noatsecure on sshd-session execution Resolves: RHEL-138247 - Allow sshd-net read and write to sshd vsock socket Related: RHEL-138247 - Allow virtqemud_t get priority of a svirt_t process Resolves: RHEL-224484 - Remove permissive domain for sshd_session_t and sshd_auth_t Resolves: RHEL-178897 - Replace "\_" (backslash underscore) with "_" (just underscore) Resolves: RHEL-171367 - Rebuild because of a missing target tag Resolves: RHEL-152308 - Rebuild for SELinux userspace 3.10 - Allow NetworkManager list bpf directories Resolves: RHEL-142171 - Dontaudit systemd-generator connect to sssd over a unix stream socket Resolves: RHEL-114886 - Allow pkcsslotd read files in /proc and /sys Resolves: RHEL-130812 - Allow pkcsslotd map its private tmpfs files Resolves: RHEL-130812 - Allow tlshd communication to unconfined_t over a tcp socket Resolves: RHEL-125106 - Label /run/insights-client.ppid with insights_client_run_t Resolves: RHEL-146687 - Allow NM nvme dispatcher script start systemd services Resolves: RHEL-140760 - Allow tlshd write generic certificate dirs Resolves: RHEL-127023 - Allow aide get attributes of tmpfs and devtmpfs filesystems Resolves: RHEL-121479 - Allow plasma login manager stop login services Resolves: RHEL-140911 - Rebuild selinux policy after installation of the extra package Resolves: RHEL-135875 Resolves: RHEL-143926 - Move triggerin scriptlets to the parent packages Resolves: RHEL-141813 - Rebuild policy before running {binsbin|varrun}-convert.sh Resolves: RHEL-141813 - Rebuild selinux policy after installation of the extra package Resolves: RHEL-135875 - Allow rhsmcertd read anaconda run files Resolves: RHEL-141391 - Allow mdadm to use CAP_BPF during RAID monitoring Resolves: RHEL-135765 - Allow mdadm the CAP_SYS_PTRACE capability Resolves: RHEL-135765 - Allow staff and sysadm execute iotop using sudo Resolves: RHEL-134940 - Allow kernel_t to read/write all domains' pipes Resolves: RHEL-124442 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148107 - Allow sshd-session inherit limits from its parent sshd process Resolves: RHEL-136673 - Revert "Allow sshd-session inherit limits from its parent process" Resolves: RHEL-136673 - Allow tlshd write generic certificates Resolves: RHEL-123737 - Allow systemd-hostnamed to create its Varlink socket Resolves: RHEL-139385 - Update gpg_role() interface with unix_stream_socket permissions Resolves: RHEL-128555 - Label /etc/aliases.cdb with etc_aliases_t Resolves: RHEL-109976 - Add aliases.lmdb to mta_filetrans_named_content() Resolves: RHEL-140884 - Update policy for bootupd Resolves: RHEL-141391 - Macros: Require only "stable" version of selinux-policy (RHEL-141423) - Label bootloader-migrate-generator with coreos_bootloader_migrate_generator_exec_t Resolves: RHEL-193860 - Label /run/coreos with coreos_installer_var_run_t Resolves: RHEL-193859 - Add systemd_create_generator_unit_file() and systemd_write_generator_unit_file() Resolves: RHEL-193859 - Allow virtqemud_t get priority of a svirt_t process Resolves: RHEL-224484 - Remove permissive domain for sshd_session_t and sshd_auth_t Resolves: RHEL-178897 - Replace "\_" (backslash underscore) with "_" (just underscore) Resolves: RHEL-171367 - Rebuild because of a missing target tag Resolves: RHEL-152308 - Rebuild for SELinux userspace 3.10 - Allow NetworkManager list bpf directories Resolves: RHEL-142171 - Dontaudit systemd-generator connect to sssd over a unix stream socket Resolves: RHEL-114886 - Allow pkcsslotd read files in /proc and /sys Resolves: RHEL-130812 - Allow pkcsslotd map its private tmpfs files Resolves: RHEL-130812 - Allow tlshd communication to unconfined_t over a tcp socket Resolves: RHEL-125106 - Label /run/insights-client.ppid with insights_client_run_t Resolves: RHEL-146687 - Allow NM nvme dispatcher script start systemd services Resolves: RHEL-140760 - Allow tlshd write generic certificate dirs Resolves: RHEL-127023 - Allow aide get attributes of tmpfs and devtmpfs filesystems Resolves: RHEL-121479 - Allow plasma login manager stop login services Resolves: RHEL-140911 - Rebuild selinux policy after installation of the extra package Resolves: RHEL-135875 Resolves: RHEL-143926 - Move triggerin scriptlets to the parent packages Resolves: RHEL-141813 - Rebuild policy before running {binsbin|varrun}-convert.sh Resolves: RHEL-141813 - Rebuild selinux policy after installation of the extra package Resolves: RHEL-135875 - Allow rhsmcertd read anaconda run files Resolves: RHEL-141391 - Allow mdadm to use CAP_BPF during RAID monitoring Resolves: RHEL-135765 - Allow mdadm the CAP_SYS_PTRACE capability Resolves: RHEL-135765 - Allow staff and sysadm execute iotop using sudo Resolves: RHEL-134940 - Allow kernel_t to read/write all domains' pipes Resolves: RHEL-124442 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148107 - Allow sshd-session inherit limits from its parent sshd process Resolves: RHEL-136673 - Revert "Allow sshd-session inherit limits from its parent process" Resolves: RHEL-136673 - Allow tlshd write generic certificates Resolves: RHEL-123737 - Allow systemd-hostnamed to create its Varlink socket Resolves: RHEL-139385 - Update gpg_role() interface with unix_stream_socket permissions Resolves: RHEL-128555 - Label /etc/aliases.cdb with etc_aliases_t Resolves: RHEL-109976 - Add aliases.lmdb to mta_filetrans_named_content() Resolves: RHEL-140884 - Update policy for bootupd Resolves: RHEL-141391 - Rebuild because of a missing target tag Resolves: RHEL-152308 - Rebuild for SELinux userspace 3.10 - Allow NetworkManager list bpf directories Resolves: RHEL-142171 - Dontaudit systemd-generator connect to sssd over a unix stream socket Resolves: RHEL-114886 - Allow pkcsslotd read files in /proc and /sys Resolves: RHEL-130812 - Allow pkcsslotd map its private tmpfs files Resolves: RHEL-130812 - Allow tlshd communication to unconfined_t over a tcp socket Resolves: RHEL-125106 - Label /run/insights-client.ppid with insights_client_run_t Resolves: RHEL-146687 - Allow NM nvme dispatcher script start systemd services Resolves: RHEL-140760 - Allow tlshd write generic certificate dirs Resolves: RHEL-127023 - Allow aide get attributes of tmpfs and devtmpfs filesystems Resolves: RHEL-121479 - Allow plasma login manager stop login services Resolves: RHEL-140911 - Rebuild selinux policy after installation of the extra package Resolves: RHEL-135875 Resolves: RHEL-143926 - Move triggerin scriptlets to the parent packages Resolves: RHEL-141813 - Rebuild policy before running {binsbin|varrun}-convert.sh Resolves: RHEL-141813 - Rebuild selinux policy after installation of the extra package Resolves: RHEL-135875 - Allow rhsmcertd read anaconda run files Resolves: RHEL-141391 - Allow mdadm to use CAP_BPF during RAID monitoring Resolves: RHEL-135765 - Allow mdadm the CAP_SYS_PTRACE capability Resolves: RHEL-135765 - Allow staff and sysadm execute iotop using sudo Resolves: RHEL-134940 - Allow kernel_t to read/write all domains' pipes Resolves: RHEL-124442 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148107 - Allow sshd-session inherit limits from its parent sshd process Resolves: RHEL-136673 - Revert "Allow sshd-session inherit limits from its parent process" Resolves: RHEL-136673 - Allow tlshd write generic certificates Resolves: RHEL-123737 - Allow systemd-hostnamed to create its Varlink socket Resolves: RHEL-139385 - Update gpg_role() interface with unix_stream_socket permissions Resolves: RHEL-128555 - Label /etc/aliases.cdb with etc_aliases_t Resolves: RHEL-109976 - Add aliases.lmdb to mta_filetrans_named_content() Resolves: RHEL-140884 - Update policy for bootupd Resolves: RHEL-141391 - Macros: Require only "stable" version of selinux-policy (RHEL-141423) - Allow hostapd write to socket files in /tmp Resolves: RHEL-77047 - Allow stap server read virtual memory sysctls Resolves: RHEL-114104 - Allow sshd-session inherit limits from its parent process Resolves: RHEL-136673 - Allow sshd noatsecure on sshd-session execution Resolves: RHEL-138247 - Allow sshd-net read and write to sshd vsock socket Related: RHEL-138247 - Update ktls policy Resolves: RHEL-123737 - Update policy for redfish-finder Resolves: RHEL-50299 - Allow sshd-session read, write, and map ica tmpfs files Resolves: RHEL-138247 - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t Resolves: RHEL-127721 - Allow stalld map sysfs files Resolves: RHEL-135512 - Allow aide get attributes of a filesystem with extended attributes Resolves: RHEL-121479 - Label miscellaneous /dev/papr-* devices Resolves: RHEL-129839 - Allow KDE Plasma Login Manager to function as a display manager Resolves: RHEL-135676 - Update specfile trigger for openwsmand Resolves: RHEL-133024 - Add the rpm_signal() interface Related: RHEL-107589 - Allow tuned_t use its private tmpfs files Related: RHEL-107589 - Allow samba-bgqd send to smbd over a unix datagram socket Resolves: RHEL-93731 - Allow kdump search kdumpctl_tmp_t directories Resolves: RHEL-116041 - Confine redfish_finder - host api discovery service Resolves: RHEL-50299 - Update policy for dhcpc_hook_t Resolves: RHEL-113937 - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t Resolves: RHEL-113937 - Allow systemd to map files under /sys Resolves: RHEL-132638 - Pull PQC crypto to sq - Make installation of shell completions and man pages more robust - Update to 1.3.0 - Stop skipping tests that no longer need to be skipped - Update to 1.1.0 upstream release - Bump release for October 2024 mass rebuild: - Update vendored openssl, sequoia-openpgp and zerovec crates - initial CI and gating setup - Don't compile capnproto in %prep - Introduce alias for ML-DSA keys during key generation - Update to 1.4.0 and fix CVE-2026-42784 - Remove bundled capnproto - Pull PQC crypto to sq - Make installation of shell completions and man pages more robust - Update to 1.3.0 - Stop skipping tests that no longer need to be skipped - Update to 1.1.0 upstream release - Bump release for October 2024 mass rebuild: - Update vendored openssl, sequoia-openpgp and zerovec crates - Fix CVE-2026-93657 - Fix CVE-2026-93599 - Introduce alias for ML-DSA keys during key generation - Update to 1.4.0 and fix CVE-2026-42784 - Remove bundled capnproto - Pull PQC crypto to sq - Make installation of shell completions and man pages more robust - Update to 1.3.0 - Stop skipping tests that no longer need to be skipped - Update to 1.1.0 upstream release - Pull PQC crypto to sqv - Make installation of shell completions and man pages more robust - Update to 1.3.0 - Bump release for October 2024 mass rebuild: - initial CI and gating setup - Update openpgp crate to fix CVE-2026-42784 - Pull PQC crypto to sqv - Make installation of shell completions and man pages more robust - Update to 1.3.0 - Bump release for October 2024 mass rebuild: - initial CI and gating setup - Rebuild for SELinux userspace 3.10 (RHEL-150462) - Fix seinfo argument parsing when policy path follows query options (RHEL-118641) - SETools 4.6.0 - Drop redundant runtime requirement on python3-setuptools (redux) - Rebuild for SELinux userspace 3.9 (RHEL-104006) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix License tag - SETools 4.5.1 - SETools 4.5.0 - Rebuild for SELinux userspace 3.10 (RHEL-150462) - Fix seinfo argument parsing when policy path follows query options (RHEL-118641) - SETools 4.6.0 - Drop redundant runtime requirement on python3-setuptools (redux) - Rebuild for SELinux userspace 3.9 (RHEL-104006) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix License tag - SETools 4.5.1 - SETools 4.5.0 - Rebuild for SELinux userspace 3.10 (RHEL-150462) - Fix seinfo argument parsing when policy path follows query options (RHEL-118641) - SETools 4.6.0 - Drop redundant runtime requirement on python3-setuptools (redux) - Rebuild for SELinux userspace 3.9 (RHEL-104006) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix License tag - SETools 4.5.1 - SETools 4.5.0 - audit_data: include syslog when needed (RHEL-39700) - Reload auditd using auditctl instead of service - Drop dependency on initscripts-service Resolves: rhbz#2365614 - Update tmpfiles.d config (bz#2346971) - Do not hardcode /var/lib/selinux as store_root - Do not hardcode /var/lib/selinux as store_root - Fix icon file name (bz#2300369) - data: update app icon - Disable bug reporting, if libreport is not available - Enable Georgian and Arabic (ar) languages in configure.ac - Update translations - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable bug reporting, if libreport is not available - Resolves: RHEL-52902 - Bump release for June 2024 mass rebuild - Ship with contemporary app icon - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update generated configuration files (rhbz#2226425) - Improve disable_ipv6 plugin then_text - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - audit_data: include syslog when needed (RHEL-39700) - Reload auditd using auditctl instead of service - Drop dependency on initscripts-service Resolves: rhbz#2365614 - Update tmpfiles.d config (bz#2346971) - Do not hardcode /var/lib/selinux as store_root - Do not hardcode /var/lib/selinux as store_root - Fix icon file name (bz#2300369) - data: update app icon - Disable bug reporting, if libreport is not available - Enable Georgian and Arabic (ar) languages in configure.ac - Update translations - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable bug reporting, if libreport is not available - Resolves: RHEL-52902 - Bump release for June 2024 mass rebuild - Ship with contemporary app icon - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update license tag to the SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fix buffer overflow with high port numbers - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Use AlmaLinux cert - Use gcc-toolset-12 - Fix the sbat data Related: RHEL-18969 - Update to shim-16.1 Resolves: RHEL-18969 - Rebuild to fix the commit ident and MAKEFLAGS Resolves: RHEL-11262 - Update to shim-15.8 for CVE-2023-40547 Resolves: RHEL-11262 - Resolves: RHEL-69773, Update "Padauk Book" font priority to 66 - Update CI files - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert to new fonts packaging guidelines - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - 6.14.0 Resolves: RHEL-109197 - 6.9.0 Resolves: RHEL-70413 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild (fixed SPDX license) - Update to new upstream release 6.8.2 (#2252260) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Add plexus-container-default alias - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with default JDK 17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuild with no changes - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168168 - enable sequoia - Resolves: RHEL-56364 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149255 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80817 - Do not require BATS on RHEL - Resolves: RHEL-96982 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80817 - fix gating.yaml - Related: RHEL-80817 - Fix bats dep on tests subpackage - Resolves: RHEL-58990 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158499 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168168 - enable sequoia - Resolves: RHEL-56364 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149255 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80817 - Do not require BATS on RHEL - Resolves: RHEL-96982 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80817 - fix gating.yaml - Related: RHEL-80817 - Rebuild for golang CVE fixes - Resolves: RHEL-241177 RHEL-241425 RHEL-241563 RHEL-241763 RHEL-242151 RHEL-251832 - re-add test file installation to fix tier0 tests - Rebuild for CVE-2026-27145 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158499 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168168 - enable sequoia - Resolves: RHEL-56364 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149255 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80817 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168168 - enable sequoia - Resolves: RHEL-56364 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149255 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80817 - Do not require BATS on RHEL - Resolves: RHEL-96982 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80817 - fix gating.yaml - Related: RHEL-80817 - Fix bats dep on tests subpackage - Resolves: RHEL-58990 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158499 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168168 - enable sequoia - Resolves: RHEL-56364 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149255 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80817 - Do not require BATS on RHEL - Resolves: RHEL-96982 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80817 - fix gating.yaml - Related: RHEL-80817 - Rebuild for golang CVE fixes - Resolves: RHEL-241177 RHEL-241425 RHEL-241563 RHEL-241763 RHEL-242151 RHEL-251832 - re-add test file installation to fix tier0 tests - Rebuild for CVE-2026-27145 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158499 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168168 - enable sequoia - Resolves: RHEL-56364 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149255 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-122178 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80817 - fix issues found by static analysis (RHEL-36476) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - disable pcre module (#2128372) - convert license tag to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix regression in data initialization - Resolves: RHEL-56042 - Upstream release 0.70.0: make NIS server optional - Disable NIS server support - Resolves: RHEL-34186 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Ignore updates from non-tracked subtrees during modify/modrdn/update to avoid deadlocks with retro changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with default JDK 17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with default JDK 17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3 - Resolves: RHEL-94771 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2 - Related: RHEL-58990 - revive slirp4netns - Resolves: RHEL-65176 - Update to 1.8.6 Resolves: RHEL-100170 - Update to 1.8.5 Resolves: RHEL-73359 - Update to 1.8.4 Resolves: RHEL-24059 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Resolves: RHEL-185465 - smc-tools: smc_rnics is not listing the NetH/NetD cards inside the guest - Update to 1.8.6 Resolves: RHEL-100170 - Update to 1.8.5 Resolves: RHEL-73359 - Update to 1.8.4 Resolves: RHEL-24059 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update the version test expectation. - Update to upstream 0.7.0 - schedule: fix TIMELINE policy retention indexing when keep_x > len(x) - Update expected string in TMT version test - Update to upstream 0.5.2 - Skip test_create_snapshot_set_no_provider in CI - Update TMT configuration - Update to upstream 0.5.1 - Update test path in main.fmf - Remove stray .patch file - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove build-dependency google-benchmark - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Drop gtest on RHEL, migrate to SPDX license identifier - Updated to version 1.1.10. - Removed snappy-inline.patch as it's no longer required. - Build with C++14 instead of C++11; gtest 1.13.0 requires it - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - add fix for CVE-2024-54661 Resolves: RHEL-70097 - switch to autopatch, remove unused patches - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Resolves: rhbz#2038615 socat-1.7.4.4 is available - Add BuildRequires on systemd-rpm-macros Resolves: RHEL-88182 - Use systemd-sysusers Resolves: RHEL-4901 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release due to beta release build issues. Resolves: RHEL-33748 - Bump release for exception phase. Resolves: RHEL-33748 - Bump release for rebuild. Related: RHEL-33748 - Fix initialization of random number generator. Related: RHEL-33748 - Disable usage of OpenSSL engines when providers are available. Resolves: RHEL-33748 - Bump release for June 2024 mass rebuild - Prevent access to global C++ variables once they destroyed - Patch from Neil Horman (OpenSSL) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update license to SPDX format and fix licenses - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild for shipping devel subpackage in CRB - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Added upstream patch to fix BZ 2256374. - Rebuilt for Boost 1.83 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Boost 1.81 - Stop adding 'cxx' language mapping (fixed upstream) - Add 'rpm-spec' (used in asciidoc) mapping - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10 Festival in RHEL 10) - Bump release for June 2024 mass rebuild - Fix split -libs upgrades - Split out libs and adjust dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Have utils require pulseaudio-utils as it's the default. - 0.11.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10 Festival in RHEL 10) - Bump release for June 2024 mass rebuild - Fix split -libs upgrades - Split out libs and adjust dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Have utils require pulseaudio-utils as it's the default. - 0.11.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10 Festival in RHEL 10) - Bump release for June 2024 mass rebuild - Fix split -libs upgrades - Split out libs and adjust dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Have utils require pulseaudio-utils as it's the default. - 0.11.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10 Festival in RHEL 10) - Bump release for June 2024 mass rebuild - Fix split -libs upgrades - Split out libs and adjust dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Have utils require pulseaudio-utils as it's the default. - 0.11.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10 Festival in RHEL 10) - Bump release for June 2024 mass rebuild - Fix split -libs upgrades - Split out libs and adjust dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Have utils require pulseaudio-utils as it's the default. - 0.11.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add licenses to fully conform with SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Change the License tag to the SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert license to SPDX format - Update to v0.42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - BR on phodav >= 3.0 - BR on libsoup3 - Update to 0.41 - Update to v0.40 - Fix FTBFS. rhbz#2047026 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert license to SPDX format - Update to v0.42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - BR on phodav >= 3.0 - BR on libsoup3 - Update to 0.41 - Update to v0.40 - Fix FTBFS. rhbz#2047026 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert license to SPDX format - Update to v0.42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - BR on phodav >= 3.0 - BR on libsoup3 - Update to 0.41 - Update to v0.40 - Fix FTBFS. rhbz#2047026 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert license to SPDX format - Update to v0.42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - BR on phodav >= 3.0 - BR on libsoup3 - Update to 0.41 - Update to v0.40 - Fix FTBFS. rhbz#2047026 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert license to SPDX format - Update to v0.42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - BR on phodav >= 3.0 - BR on libsoup3 - Update to 0.41 - Update to v0.40 - Fix FTBFS. rhbz#2047026 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert license to SPDX format - Update to v0.42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - BR on phodav >= 3.0 - BR on libsoup3 - Update to 0.41 - Update to v0.40 - Fix FTBFS. rhbz#2047026 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert license to SPDX format - Update to v0.42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - BR on phodav >= 3.0 - BR on libsoup3 - Update to 0.41 - Update to v0.40 - Fix FTBFS. rhbz#2047026 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.15.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt with OpenSSL 3.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix flatpak build - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - BR on libxml2 - Update to 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 1.4.328.1 SDK - Rebuilt to move the package to AppStream - Update to SDK v1.4.313.0 - Rebuild for the correct RHEL 10 target - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Update to 1.3.283.0 SDK - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.4.328.1 SDK - Update to SDK v1.4.313 SDK - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Update to 1.3.283.0 SDK - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.4.328.1 SDK - Update to SDK v1.4.313 SDK - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Update to 1.3.283.0 SDK - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration and fix prep warning for %patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix CVE-2025-6965 - Resolves: RHEL-103827 - Fix for CVE-2025-3277 - Resolves: RHEL-87295 - Enabled sqlite-session feature - Resolves: RHEL-77326 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.46.1 - https://www.sqlite.org/releaselog/3_46_1.html - Bump release for June 2024 mass rebuild - Updated to version 3.45.1 (https://sqlite.org/releaselog/3_45_1.html) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html) - List versioned soname in files, preventing unnoticed soname bumps - Disable func4 tests for i686 arch due to failing float<->int conversions - Updated to version 3.44.2 (https://sqlite.org/releaselog/3_44_2.html) - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 - Resolves: RHEL-218240 - Resolves: RHEL-218275 - Fix CVE-2025-6965 - Resolves: RHEL-103827 - Fix for CVE-2025-3277 - Resolves: RHEL-87295 - Enabled sqlite-session feature - Resolves: RHEL-77326 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.46.1 - https://www.sqlite.org/releaselog/3_46_1.html - Fix CVE-2025-6965 - Resolves: RHEL-103827 - Fix for CVE-2025-3277 - Resolves: RHEL-87295 - Enabled sqlite-session feature - Resolves: RHEL-77326 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.46.1 - https://www.sqlite.org/releaselog/3_46_1.html - Bump release for June 2024 mass rebuild - Updated to version 3.45.1 (https://sqlite.org/releaselog/3_45_1.html) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html) - List versioned soname in files, preventing unnoticed soname bumps - Disable func4 tests for i686 arch due to failing float<->int conversions - Updated to version 3.44.2 (https://sqlite.org/releaselog/3_44_2.html) - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 - Resolves: RHEL-218240 - Resolves: RHEL-218275 - Fix CVE-2025-6965 - Resolves: RHEL-103827 - Fix for CVE-2025-3277 - Resolves: RHEL-87295 - Enabled sqlite-session feature - Resolves: RHEL-77326 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.46.1 - https://www.sqlite.org/releaselog/3_46_1.html - Resolves: RHEL-172001 - Setting "http_reply_access" in squid.conf causes a memory leak - Resolves: RHEL-160669 - squid: Squid: Denial of Service via crafted ICP traffic - Resolves: RHEL-160668 - squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526) - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when downloading a file on RHEL9 - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168) - Resolves: RHEL-107994 - squid does not work with post-quantum crypto - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is output frequently on RHEL10 - Disable ESI support - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI response content - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-64426 - TCP_MISS_ABORTED/100 erros when uploading - Resolves: RHEL-160670 - squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526) - Resolves: RHEL-160671 - squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748) - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when downloading a file on RHEL9 - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168) - Resolves: RHEL-107994 - squid does not work with post-quantum crypto - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is output frequently on RHEL10 - Disable ESI support - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI response content - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-64426 - TCP_MISS_ABORTED/100 erros when uploading - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent to the client in its complementary - new version 6.10 - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of Service (CVE-2024-37894) - Fix issues discovered by OSCI tests - Update to SSCG 4.0.3 - Update to SSCG 4.0.1 - Restore creation of dhparams file by default - Release SSCG 4.0.0 - Support for ML-DSA keys for post-quantum cryptography (PQC) when built against OpenSSL 3.5 or later - Support for EC-DSA keys for elliptic curves - RSA certificate authority is now created with a minimum key strength of 4096 bits - Improved --help output - Deprecated support for generating custom DH parameters - Stopped producing the DH parameter file by default (it may be requested explicitly with the --dhparams-file argument) - Minimum OpenSSL version is now 3.0 - Drop upstreamed patches - Migrate FMF tests into metadata format used in rhel-stacks - Fix IP address handling in CA certificate SAN constraints - Add automatic single-IP subnet mask to IP addresses in CA name constraints - Update help text to show simplified IP format without subnet mask - Add comprehensive test for basicConstraints - Ensure 'critical' basicConstraint for CA cert - x509: Use proper version for CSR - Bump release for October 2024 mass rebuild: - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use vendored dependencies in ELN builds - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuild for fixed frame pointer compiler flags in Rust RPM macros. - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuild for c10s - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole - Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2 - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000] - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4 - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c' - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2] - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name. - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache - Resolves: RHEL-72935 - sss_override does not work on AD UPN - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD] - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication) - Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1 - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache - Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1 - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1 - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack - Resolves: RHEL-25593 - Improve sssd-simple man page description - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem - Resolves: RHEL-4981 - p11_child currently has an infinite timeout - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names - Resolves: RHEL-257112 - CVE-2026-87853 sssd: IDP prefix-match bypass in eval_access_token_buf() - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole - Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2 - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000] - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4 - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c' - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2] - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name. - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache - Resolves: RHEL-72935 - sss_override does not work on AD UPN - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD] - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication) - Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1 - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache - Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1 - Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work - Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2 - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000] - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4 - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c' - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2] - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name. - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache - Resolves: RHEL-72935 - sss_override does not work on AD UPN - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD] - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication) - Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1 - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache - Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1 - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1 - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack - Resolves: RHEL-25593 - Improve sssd-simple man page description - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem - Resolves: RHEL-4981 - p11_child currently has an infinite timeout - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names - Resolves: RHEL-89474 - Fails to build on riscv64 - Rebase to stalld-1.26.3 - Build System Improvements and added riscv64 arch - Make queue_track the default backend - Remove LTO build flags - Remove the -m64 build flag Resolves: RHEL-105604 RHEL-114506 - Rebase to stalld-1.20.4 - Remove duplicated ExecStart entry from the stalld.service file Resolves: RHEL-109112 - Rebase to stalld-1.20.3 - Make systemd start stalld with the SCHED_FIFO:10 priority Resolves: RHEL-109112 - Detect the dl_server and enter in log mode Resolves: RHEL-73883 RHEL-104107 RHEL-104386 - Check if sched_attr is in glibc Resolves: RHEL-92953 - sched_debug: fix non x86 support - stalld.h: fix prototype mis-patch with cleanup_regex() - throttlectl.sh: add errexit - stalld.h: fix incorrect default umask value - version bump - Fix building with glibc 2.41 - throttlectl: clean up throttling script due to reported CVE-2024-54159 - Makefile: change modes on throttled and stalld - stalld.c: use a more reasonable size for reading /proc/stat Resolves: RHEL-69567 Resolves: RHEL-40146 Resolves: RHEL-79159 Resolves: RHEL-67223 Resolves: RHEL-50356 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Makefile: add uninstall target - systemd: add BE environment variable to select backend Resolves: RHEL-34055 - Fix changelog to use RPMCFLAGS, allowing for bpf to be used. Resolves: RHEL-34055 - Refactor Makefile to fix passing options to koji builds - Updated compile options for annocheck hardening - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences. - Added an 'annocheck' makefile target for local checking. Resolves: RHEL-34055 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix a typo in -27 which made it uninstallable (missing %) - Use SPDX for license field - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix a typo in -27 which made it uninstallable (missing %) - Use SPDX for license field - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update License field to SPDX - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 3.8.3 - Resolves: RHEL-125936 - Update to 3.8.1 Resolves: RHEL-71912 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.7.0 - Resolves: RHEL-59994 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.8.6 - Resolves: RHEL-125937 - Update unit.fmf ref to v3.8.1 - Resolves: RHEL-121567 - Fix problem with FTBFS - Resolves: RHEL-121567 - Update to 3.8.1 Resolves: RHEL-71909 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.7.3 - Resolves: RHEL-60000 - Bump release for June 2024 mass rebuild - Rebuild for new gating configuration - Resolves: RHEL-33817 - Update to 3.6.7 - Resolves: RHEL-33817 - Update to 3.6.4 - Update to 3.8.6 - Resolves: RHEL-125937 - Update unit.fmf ref to v3.8.1 - Resolves: RHEL-121567 - Fix problem with FTBFS - Resolves: RHEL-121567 - Update to 3.8.1 Resolves: RHEL-71909 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.7.3 - Resolves: RHEL-60000 - Bump release for June 2024 mass rebuild - Rebuild for new gating configuration - Resolves: RHEL-33817 - Update to 3.6.7 - Resolves: RHEL-33817 - Update to 3.6.4 - Update to 3.8.6 - Resolves: RHEL-125937 - Update unit.fmf ref to v3.8.1 - Resolves: RHEL-121567 - Fix problem with FTBFS - Resolves: RHEL-121567 - Update to 3.8.1 Resolves: RHEL-71909 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 3.7.3 - Resolves: RHEL-60000 - Bump release for June 2024 mass rebuild - Rebuild for new gating configuration - Resolves: RHEL-33817 - Update to 3.6.7 - Resolves: RHEL-33817 - Update to 3.6.4 - Remove ExcludeArch so that the code will be compiled on s390 Resolves: RHEL-86708 - Rebase to stress-ng-0.19.03 upstream Resolves: RHEL-86708 - Rebase to stress-ng-0.19.02 upstream Resolves: RHEL-86708 - Rebase to stress-ng-0.19.01 upstream Resolves: RHEL-86708 - Change the rpminspect.yaml with instructions from David Cantrell Resolves: RHEL-33521 - Add -fPIC flag to improve annocheck results Resolves: RHEL-33521 - Moving the annocheck rules back from gating.yaml to rpminspect.yaml Resolves: RHEL-33521 - Adding annocheck rules to gating.yaml Resolves: RHEL-33521 - Due to the special nature of stress-ng, it's not even possible to compile with -fpic or -fPIC, so turning annocheck off Resolves: RHEL-33521 - Adding --skip-dynamic-tags to exceptions in rpminspect.yaml Resolves: RHEL-33521 - mod_dav_svn: inherit DavBasePath from mod_dav Resolves: RHEL-105424 - update to 1.14.5 (#2331047) - use %autosetup - enable tests by default again - conditionalize Ruby tests (Yaakov Selkowitz) - Rebase to version 1.14.4 - Resolves: rhbz#2317222 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Fix debuginfo building and stop building ruby and java subpackages - Resolves: RHEL-52974 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building with gcc 14 - incompatible-pointer-types warnings became errors, but they've been present for a long time and posed no threat, thus revert the behaviour - Resolves: rhbz#2259155 - Fix testing of binary patch - Resolves: rhbz#2255746 - mod_dav_svn: inherit DavBasePath from mod_dav Resolves: RHEL-105424 - update to 1.14.5 (#2331047) - use %autosetup - enable tests by default again - conditionalize Ruby tests (Yaakov Selkowitz) - Rebase to version 1.14.4 - Resolves: rhbz#2317222 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Fix debuginfo building and stop building ruby and java subpackages - Resolves: RHEL-52974 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building with gcc 14 - incompatible-pointer-types warnings became errors, but they've been present for a long time and posed no threat, thus revert the behaviour - Resolves: rhbz#2259155 - Fix testing of binary patch - Resolves: rhbz#2255746 - mod_dav_svn: inherit DavBasePath from mod_dav Resolves: RHEL-105424 - update to 1.14.5 (#2331047) - use %autosetup - enable tests by default again - conditionalize Ruby tests (Yaakov Selkowitz) - Rebase to version 1.14.4 - Resolves: rhbz#2317222 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Fix debuginfo building and stop building ruby and java subpackages - Resolves: RHEL-52974 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building with gcc 14 - incompatible-pointer-types warnings became errors, but they've been present for a long time and posed no threat, thus revert the behaviour - Resolves: rhbz#2259155 - Fix testing of binary patch - Resolves: rhbz#2255746 - mod_dav_svn: inherit DavBasePath from mod_dav Resolves: RHEL-105424 - update to 1.14.5 (#2331047) - use %autosetup - enable tests by default again - conditionalize Ruby tests (Yaakov Selkowitz) - Rebase to version 1.14.4 - Resolves: rhbz#2317222 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Fix debuginfo building and stop building ruby and java subpackages - Resolves: RHEL-52974 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building with gcc 14 - incompatible-pointer-types warnings became errors, but they've been present for a long time and posed no threat, thus revert the behaviour - Resolves: rhbz#2259155 - Fix testing of binary patch - Resolves: rhbz#2255746 - mod_dav_svn: inherit DavBasePath from mod_dav Resolves: RHEL-105424 - update to 1.14.5 (#2331047) - use %autosetup - enable tests by default again - conditionalize Ruby tests (Yaakov Selkowitz) - Rebase to version 1.14.4 - Resolves: rhbz#2317222 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Fix debuginfo building and stop building ruby and java subpackages - Resolves: RHEL-52974 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building with gcc 14 - incompatible-pointer-types warnings became errors, but they've been present for a long time and posed no threat, thus revert the behaviour - Resolves: rhbz#2259155 - Fix testing of binary patch - Resolves: rhbz#2255746 - mod_dav_svn: inherit DavBasePath from mod_dav Resolves: RHEL-105424 - update to 1.14.5 (#2331047) - use %autosetup - enable tests by default again - conditionalize Ruby tests (Yaakov Selkowitz) - Rebase to version 1.14.4 - Resolves: rhbz#2317222 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Fix debuginfo building and stop building ruby and java subpackages - Resolves: RHEL-52974 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix building with gcc 14 - incompatible-pointer-types warnings became errors, but they've been present for a long time and posed no threat, thus revert the behaviour - Resolves: rhbz#2259155 - Fix testing of binary patch - Resolves: rhbz#2255746 - Fix CVE-2026-82474: execveat(2) intercept/log_subcmds bypass - Resolves: RHEL-212546 - Use canonicalized path if user path contains ".." - Bump release number - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to the shell being executed [rhel-10] - Resolves: RHEL-128212 - [RFE] request to backport support for regex in sudo [rhel-10] - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10] - Rebase sudo to 1.9.17p2 - Resolves: RHEL-122752 - RHEL 10.1 ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009 - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022 - Bump release for October 2024 mass rebuild: - CVE-2026-96512 sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization [rhel-10.2.z] - Fix CVE-2026-82474: execveat(2) intercept/log_subcmds bypass - Resolves: RHEL-212546 - Use canonicalized path if user path contains ".." - Bump release number - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to the shell being executed [rhel-10] - Resolves: RHEL-128212 - [RFE] request to backport support for regex in sudo [rhel-10] - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10] - Rebase sudo to 1.9.17p2 - Resolves: RHEL-122752 - RHEL 10.1 ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009 - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022 - Bump release for October 2024 mass rebuild: - Bump release number - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to the shell being executed [rhel-10] - Resolves: RHEL-128212 - [RFE] request to backport support for regex in sudo [rhel-10] - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10] - Rebase sudo to 1.9.17p2 - Resolves: RHEL-122752 - RHEL 10.1 ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009 - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022 - Bump release for October 2024 mass rebuild: - RHEL 10.0 ERRATUM - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true positive(s) Resolves: RHEL-44436 - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864 - RHEL 10.0 ERRATUM - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true positive(s) Resolves: RHEL-44436 - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864 - RHEL 10.0 ERRATUM - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true positive(s) Resolves: RHEL-44436 - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864 - Bump release for June 2024 mass rebuild - Enable building for ppc64le - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to Fedora Rawhide resolves: RHEL-56806 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - OCaml 5.2.0 for Fedora 41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream version 5.3.4 - Remove patches which are now all upstream. - OCaml 5.1.1 + s390x code gen fix for Fedora 40 - OCaml 5.1.1 rebuild for Fedora 40 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add extra SELinux policies. https://github.com/stefanberger/swtpm/issues/970 Resolves: RHEL-70835 Resolves: RHEL-73809 - Add extra SELinux policies. Related: RHEL-53967 - Fix FTBFS, add gmp-devel Resolves: RHEL-65460 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add extra SELinux policies. Resolves: RHEL-47273 - Update to v0.9.0 release Resolves: RHEL-42590 - Fix SHA-1 algorithm availability Resolves: RHEL-46754 - Bump release for June 2024 mass rebuild - Use tpm2-tss to provide tss account - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Build for i686 again since dependency issue resolved - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it - Set license to BSD-3-Clause for all packages - Add extra SELinux policies. https://github.com/stefanberger/swtpm/issues/970 Resolves: RHEL-70835 Resolves: RHEL-73809 - Add extra SELinux policies. Related: RHEL-53967 - Fix FTBFS, add gmp-devel Resolves: RHEL-65460 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add extra SELinux policies. Resolves: RHEL-47273 - Update to v0.9.0 release Resolves: RHEL-42590 - Fix SHA-1 algorithm availability Resolves: RHEL-46754 - Bump release for June 2024 mass rebuild - Use tpm2-tss to provide tss account - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Build for i686 again since dependency issue resolved - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it - Set license to BSD-3-Clause for all packages - Add extra SELinux policies. https://github.com/stefanberger/swtpm/issues/970 Resolves: RHEL-70835 Resolves: RHEL-73809 - Add extra SELinux policies. Related: RHEL-53967 - Fix FTBFS, add gmp-devel Resolves: RHEL-65460 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add extra SELinux policies. Resolves: RHEL-47273 - Update to v0.9.0 release Resolves: RHEL-42590 - Fix SHA-1 algorithm availability Resolves: RHEL-46754 - Bump release for June 2024 mass rebuild - Use tpm2-tss to provide tss account - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Build for i686 again since dependency issue resolved - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it - Set license to BSD-3-Clause for all packages - Add extra SELinux policies. https://github.com/stefanberger/swtpm/issues/970 Resolves: RHEL-70835 Resolves: RHEL-73809 - Add extra SELinux policies. Related: RHEL-53967 - Fix FTBFS, add gmp-devel Resolves: RHEL-65460 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add extra SELinux policies. Resolves: RHEL-47273 - Update to v0.9.0 release Resolves: RHEL-42590 - Fix SHA-1 algorithm availability Resolves: RHEL-46754 - Bump release for June 2024 mass rebuild - Use tpm2-tss to provide tss account - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Build for i686 again since dependency issue resolved - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it - Set license to BSD-3-Clause for all packages - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - remove existing smc socket on start (RHEL-40673) - fix crash observed with newer E810 firmware (RHEL-55261) - fix initial pin ID to not match an existing pin (RHEL-55261) - fix requested thread stack size on aarch64 (RHEL-55260) - Bump release for June 2024 mass rebuild - move smc_socket_path in default config to /run - update to 1.1.0 (RHEL-39976, RHEL-39467, RHEL-39465, RHEL-39463, RHEL-39454) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - update to 1.0.0 - switch default config to use kernel DPLL API - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - update to 0.9.1 - update to 0.9.0 - Fix erroneous my_strncat implementation Resolves: RHEL-83778 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix memory leaks and off-by-one error Resolves: RHEL-42557 - Rebuild - Bump release - Add explicit package version requirement for sysfsutils requiring libsysfs - Bump release for June 2024 mass rebuild - Update license tags to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use static syslinux64.exe and syslinux.exe to avoid a difference in the checksum in x86_64_v2 arch - Fix more SAST true findings - Resolves: #RHEL-51170 - Bump release number - Resolves: #RHEL-51170 - Bump version and include previous resolves ticket number on commit message - Resolves: #RHEL-51170 - Fix true positives SAST findings - Resolves: #RHEL-51170 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Build tftpboot and nonlinux on x86_64 - Rewrite Digest::SHA1 to SHA - Bump release for June 2024 mass rebuild - Update to 47.2 - build: fix a s390 test - update patches to sysprof-el10 branch - Backport ifdef check for register knowledge - Lower libpanel requirement for s390 - Backport debuginfod and sysprof-live-unwinder - Update to Sysprof 47.1 - Bump release for October 2024 mass rebuild: - Only bundle libunwind on RHEL like systems - Bundle libunwind as part of Sysprof - Update to 47.2 - build: fix a s390 test - update patches to sysprof-el10 branch - Backport ifdef check for register knowledge - Lower libpanel requirement for s390 - Backport debuginfod and sysprof-live-unwinder - Update to Sysprof 47.1 - Bump release for October 2024 mass rebuild: - Only bundle libunwind on RHEL like systems - Bundle libunwind as part of Sysprof - Update to 47.2 - build: fix a s390 test - update patches to sysprof-el10 branch - Backport ifdef check for register knowledge - Lower libpanel requirement for s390 - Backport debuginfod and sysprof-live-unwinder - Update to Sysprof 47.1 - Bump release for October 2024 mass rebuild: - Only bundle libunwind on RHEL like systems - Bundle libunwind as part of Sysprof - Update to 47.2 - build: fix a s390 test - update patches to sysprof-el10 branch - Backport ifdef check for register knowledge - Lower libpanel requirement for s390 - Backport debuginfod and sysprof-live-unwinder - Update to Sysprof 47.1 - Bump release for October 2024 mass rebuild: - Only bundle libunwind on RHEL like systems - Bundle libunwind as part of Sysprof - make the sadf -s/-e documentation more accurate (RHEL-127493) - fix creation of /var/log/sa in image mode (RHEL-128566) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to latest upstream release (RHEL-20252) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - rebase to latest upstream release (rhbz#2254956) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - adjust gating.yaml and build it to pass gating... - RHEL-28165 - configure-printer exits with failure status when device is already handled - RHEL-26328 - Drop the dependency on python3-pycurl - 2259526 - FTBFS s-c-p due missing distutils - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - 2178027 - fix crash in options.py - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - adjust gating.yaml and build it to pass gating... - RHEL-28165 - configure-printer exits with failure status when device is already handled - RHEL-26328 - Drop the dependency on python3-pycurl - 2259526 - FTBFS s-c-p due missing distutils - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - 2178027 - fix crash in options.py - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add RISC-V support - Release 1.15.2 - Backport: https://github.com/bootc-dev/bootc/pull/2114 - Release 1.15.1 - Update to 1.14.1 - Release 1.13.0 - Update to bootc 1.13.0 - Pass CARGO_FEATURES explicitly to make install to prevent auto-detection rebuild in install environment (workaround for upstream Makefile issue) - Package shell completions (bash, zsh, fish) - Skip rpminspect checking for symbolic link /usr/lib/bootc/storage - Release 1.12.1 - Release 1.12.0 - Release 1.11.0 - Add RISC-V support - spec: new upstream version 1.16.4 - Release 1.15.2 - Release 1.15.1 - Update to 1.14.1 - Release 1.13.0 - Update to bootc 1.13.0 - Pass CARGO_FEATURES explicitly to make install to prevent auto-detection rebuild in install environment (workaround for upstream Makefile issue) - Package shell completions (bash, zsh, fish) - Skip rpminspect checking for symbolic link /usr/lib/bootc/storage - Release 1.12.1 - Release 1.12.0 - Release 1.11.0 - Add RISC-V support - Backport https://github.com/bootc-dev/bootc/pull/2485 - spec: new upstream version 1.16.4 - Release 1.15.2 - Release 1.15.1 - Update to 1.14.1 - Release 1.13.0 - Update to bootc 1.13.0 - Pass CARGO_FEATURES explicitly to make install to prevent auto-detection rebuild in install environment (workaround for upstream Makefile issue) - Package shell completions (bash, zsh, fish) - Skip rpminspect checking for symbolic link /usr/lib/bootc/storage - Release 1.12.1 - Release 1.12.0 - Debrand for AlmaLinux - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-152080) - ci: add bpftool workaround to codeql job too (RHEL-152080) - ci: fix workaround about bpftool for codeql (RHEL-152080) - ci: add bpftool workaround to coverity too (RHEL-152080) - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-152080) - cgroup: port some code over to path_startswith_full() (RHEL-152080) - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-152080) - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-152080) - core/cgroup: avoid one unnecessary strjoina() (RHEL-152080) - core: validate input cgroup path more prudently (RHEL-152080) - test-journal-dump: dump the headers of journal files (RHEL-106795) - journal: store counts, not byte sizes, in table size constants (RHEL-106795) - journal: treble field hash table size (RHEL-106795) - nspawn: move uid shift/chown() code into shared/ (RHEL-143036) - user-classification: add new "foreign" UID range (RHEL-143036) - userdb: synthesize stub user records for the foreign UID (RHEL-143036) - dissect: add new --shift command (RHEL-143036) - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036) - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036) - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036) - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036) - sd-varlink: add sd_varlink_get_description() call (RHEL-143036) - user-record: add helper for dispatching a disposition mask (RHEL-143036) - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036) - user-record: add some helpers for working with UserDBMatch (RHEL-143036) - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036) - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036) - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036) - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036) - update TODO (RHEL-143036) - JSON User/Group records: Add properties for UUIDs (RHEL-143036) - userdb: add support for printing the UUID from user and group records (RHEL-143036) - userdb: add support for looking up users or groups by uuid. (RHEL-143036) - userdbctl: add --uuid filtering option (RHEL-143036) - userdbctl: add missing --uuid= to --help text (RHEL-143036) - userdb: fix typo (RHEL-143036) - man/userdbctl: fixup version info (RHEL-143036) - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034) - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034) - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112) - logind: support deserializing session leader through pidfdid (RHEL-53112) - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112) - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112) - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219) - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822) - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702) - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702) - hwdb: update rules (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - Add Razer Cobra mouse to hwdb (RHEL-72702) - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702) - hwdb: sort SDR devices by vendor name (RHEL-72702) - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702) - hwdb: run "update-hwdb" (RHEL-72702) - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702) - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702) - hwdb: add Airspy devices (RHEL-72702) - hwdb: add more devices (RHEL-72702) - hwdb: add MiriSDR MSi2500 devices (RHEL-72702) - hwdb: add missing Ettus Research B200 rule (RHEL-72702) - hwdb: add LimeSDR XTRX devices (RHEL-72702) - hwdb: add HydraSDR RFOne (RHEL-72702) - hwdb: add SDRplay devices (RHEL-72702) - hwdb: update (RHEL-72702) - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702) - Add Nulea M501 trackball to hwdb (RHEL-72702) - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702) - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702) - remove bonus line (RHEL-72702) - hwdb: drop trailing whitespace (RHEL-72702) - remove Nulea M501 usb entry from hwdb (RHEL-72702) - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702) - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702) - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702) - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702) - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702) - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702) - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702) - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702) - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702) - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702) - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702) - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702) - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702) - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702) - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702) - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702) - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702) - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702) - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702) - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702) - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702) - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702) - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702) - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702) - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702) - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard device as set 1 (appears as raw set 2) or as set 2 (appears as translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for posterity. (RHEL-72702) - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702) - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702) - hwdb: keyboard: uppercase apple id (RHEL-72702) - integritysetup: Add support for hmac-sha512 (RHEL-27852) - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852) - core: increment start limit counter only when we can start the unit (RHEL-115032) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032) - test: extend start limit interval (RHEL-115032) - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029) - man: fix typo (RHEL-143029) - test: fix test with -Dnetworkd=false (RHEL-143029) - ci: run apt-get update before running mkosi (RHEL-115001) - add GUID for clock group (RHEL-113051) - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767) - man: don't duplicate version in History section (RHEL-128767) - tools: ignore root element explicitly in check-version-history (RHEL-128767) - systemd-logind: Add signal section in man systemd-logind (RHEL-128767) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216) - timer: rebase last_trigger timestamp if needed (RHEL-118216) - man: fix a missing word (RHEL-120277) - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179) - udev: set clock group for PTP and RTC devices (RHEL-113051) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122) - strv: introduce string_strv_hashmap_remove() (RHEL-126937) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937) - spec: ukify: require python3-zstandard (RHEL-103523) - pam_systemd: honor session class provided via PAM environment (RHEL-109832) - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813) - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813) - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205) - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205) - test: add test case for issue #38765 (RHEL-112205) - strv: add strv_equal_ignore_order() helper (RHEL-109902) - pam: minor coding style tweaks (RHEL-109902) - user-record: add helper that checks if a provided user name matches a record (RHEL-109902) - user-record: add support for alias user names to user record (RHEL-109902) - pam_systemd_home: use right field name in error message (RHEL-109902) - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902) - homed: support user record aliases (RHEL-109902) - homectl: add support for creating users with alias names (RHEL-109902) - test: add test for homed alias and realm user resolution (RHEL-109902) - update TODO (RHEL-109902) - udev: create symlinks for s390 PTP devices (RHEL-120177) - test: build the crashing test binary outside of the test (RHEL-113920) - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920) - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920) - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135) - coredump: restore compatibility with older patterns (RHEL-104135) - coredump: wrap long lines, fix grammar in comments (RHEL-104135) - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135) - coredump: use %d in kernel core pattern (RHEL-104135) - coredump: also stop forwarding non-dumpable processes (RHEL-104135) - coredump: get rid of a bogus assertion (RHEL-104135) - coredump: add support for new %F PIDFD specifier (RHEL-104135) - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135) - coredump: introduce an enum to wrap dumpable constants (RHEL-104135) - Define helper to call PR_SET_DUMPABLE (RHEL-104135) - coredump: fix 0-passed-as-pointer warning (RHEL-104135) - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216) - test: check the next elapse timer timestamp after deserialization (RHEL-118216) - timer: don't run service immediately after restart of a timer (RHEL-118216) - test: store and compare just the property value (RHEL-118216) - Debrand for AlmaLinux - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163873) - nspawn: normalize pivot_root paths (RHEL-163873) - udev: check for invalid chars in various fields received from the kernel (RHEL-163879) - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-163879) - udev: ensure tag parsing stays within bounds (RHEL-163879) - udev: fix review mixup (RHEL-163879) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163879) - udev-builtin-net-id: print cescaped bad attributes (RHEL-163879) - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-152080) - ci: add bpftool workaround to codeql job too (RHEL-152080) - ci: fix workaround about bpftool for codeql (RHEL-152080) - ci: add bpftool workaround to coverity too (RHEL-152080) - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-152080) - cgroup: port some code over to path_startswith_full() (RHEL-152080) - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-152080) - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-152080) - core/cgroup: avoid one unnecessary strjoina() (RHEL-152080) - core: validate input cgroup path more prudently (RHEL-152080) - test-journal-dump: dump the headers of journal files (RHEL-106795) - journal: store counts, not byte sizes, in table size constants (RHEL-106795) - journal: treble field hash table size (RHEL-106795) - nspawn: move uid shift/chown() code into shared/ (RHEL-143036) - user-classification: add new "foreign" UID range (RHEL-143036) - userdb: synthesize stub user records for the foreign UID (RHEL-143036) - dissect: add new --shift command (RHEL-143036) - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036) - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036) - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036) - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036) - sd-varlink: add sd_varlink_get_description() call (RHEL-143036) - user-record: add helper for dispatching a disposition mask (RHEL-143036) - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036) - user-record: add some helpers for working with UserDBMatch (RHEL-143036) - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036) - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036) - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036) - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036) - update TODO (RHEL-143036) - JSON User/Group records: Add properties for UUIDs (RHEL-143036) - userdb: add support for printing the UUID from user and group records (RHEL-143036) - userdb: add support for looking up users or groups by uuid. (RHEL-143036) - userdbctl: add --uuid filtering option (RHEL-143036) - userdbctl: add missing --uuid= to --help text (RHEL-143036) - userdb: fix typo (RHEL-143036) - man/userdbctl: fixup version info (RHEL-143036) - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034) - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034) - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112) - logind: support deserializing session leader through pidfdid (RHEL-53112) - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112) - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112) - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219) - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822) - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702) - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702) - hwdb: update rules (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - Add Razer Cobra mouse to hwdb (RHEL-72702) - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702) - hwdb: sort SDR devices by vendor name (RHEL-72702) - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702) - hwdb: run "update-hwdb" (RHEL-72702) - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702) - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702) - hwdb: add Airspy devices (RHEL-72702) - hwdb: add more devices (RHEL-72702) - hwdb: add MiriSDR MSi2500 devices (RHEL-72702) - hwdb: add missing Ettus Research B200 rule (RHEL-72702) - hwdb: add LimeSDR XTRX devices (RHEL-72702) - hwdb: add HydraSDR RFOne (RHEL-72702) - hwdb: add SDRplay devices (RHEL-72702) - hwdb: update (RHEL-72702) - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702) - Add Nulea M501 trackball to hwdb (RHEL-72702) - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702) - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702) - remove bonus line (RHEL-72702) - hwdb: drop trailing whitespace (RHEL-72702) - remove Nulea M501 usb entry from hwdb (RHEL-72702) - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702) - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702) - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702) - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702) - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702) - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702) - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702) - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702) - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702) - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702) - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702) - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702) - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702) - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702) - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702) - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702) - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702) - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702) - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702) - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702) - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702) - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702) - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702) - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702) - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702) - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard device as set 1 (appears as raw set 2) or as set 2 (appears as translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for posterity. (RHEL-72702) - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702) - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702) - hwdb: keyboard: uppercase apple id (RHEL-72702) - integritysetup: Add support for hmac-sha512 (RHEL-27852) - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852) - core: increment start limit counter only when we can start the unit (RHEL-115032) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032) - test: extend start limit interval (RHEL-115032) - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029) - man: fix typo (RHEL-143029) - test: fix test with -Dnetworkd=false (RHEL-143029) - ci: run apt-get update before running mkosi (RHEL-115001) - add GUID for clock group (RHEL-113051) - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767) - man: don't duplicate version in History section (RHEL-128767) - tools: ignore root element explicitly in check-version-history (RHEL-128767) - systemd-logind: Add signal section in man systemd-logind (RHEL-128767) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216) - timer: rebase last_trigger timestamp if needed (RHEL-118216) - man: fix a missing word (RHEL-120277) - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179) - udev: set clock group for PTP and RTC devices (RHEL-113051) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122) - strv: introduce string_strv_hashmap_remove() (RHEL-126937) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937) - spec: ukify: require python3-zstandard (RHEL-103523) - pam_systemd: honor session class provided via PAM environment (RHEL-109832) - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813) - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813) - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205) - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205) - test: add test case for issue #38765 (RHEL-112205) - strv: add strv_equal_ignore_order() helper (RHEL-109902) - pam: minor coding style tweaks (RHEL-109902) - user-record: add helper that checks if a provided user name matches a record (RHEL-109902) - user-record: add support for alias user names to user record (RHEL-109902) - pam_systemd_home: use right field name in error message (RHEL-109902) - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902) - homed: support user record aliases (RHEL-109902) - homectl: add support for creating users with alias names (RHEL-109902) - test: add test for homed alias and realm user resolution (RHEL-109902) - update TODO (RHEL-109902) - udev: create symlinks for s390 PTP devices (RHEL-120177) - test: build the crashing test binary outside of the test (RHEL-113920) - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920) - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920) - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135) - coredump: restore compatibility with older patterns (RHEL-104135) - coredump: wrap long lines, fix grammar in comments (RHEL-104135) - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135) - coredump: use %d in kernel core pattern (RHEL-104135) - coredump: also stop forwarding non-dumpable processes (RHEL-104135) - coredump: get rid of a bogus assertion (RHEL-104135) - coredump: add support for new %F PIDFD specifier (RHEL-104135) - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135) - coredump: introduce an enum to wrap dumpable constants (RHEL-104135) - Define helper to call PR_SET_DUMPABLE (RHEL-104135) - coredump: fix 0-passed-as-pointer warning (RHEL-104135) - Debrand for AlmaLinux - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-152080) - ci: add bpftool workaround to codeql job too (RHEL-152080) - ci: fix workaround about bpftool for codeql (RHEL-152080) - ci: add bpftool workaround to coverity too (RHEL-152080) - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-152080) - cgroup: port some code over to path_startswith_full() (RHEL-152080) - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-152080) - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-152080) - core/cgroup: avoid one unnecessary strjoina() (RHEL-152080) - core: validate input cgroup path more prudently (RHEL-152080) - test-journal-dump: dump the headers of journal files (RHEL-106795) - journal: store counts, not byte sizes, in table size constants (RHEL-106795) - journal: treble field hash table size (RHEL-106795) - nspawn: move uid shift/chown() code into shared/ (RHEL-143036) - user-classification: add new "foreign" UID range (RHEL-143036) - userdb: synthesize stub user records for the foreign UID (RHEL-143036) - dissect: add new --shift command (RHEL-143036) - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036) - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036) - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036) - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036) - sd-varlink: add sd_varlink_get_description() call (RHEL-143036) - user-record: add helper for dispatching a disposition mask (RHEL-143036) - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036) - user-record: add some helpers for working with UserDBMatch (RHEL-143036) - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036) - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036) - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036) - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036) - update TODO (RHEL-143036) - JSON User/Group records: Add properties for UUIDs (RHEL-143036) - userdb: add support for printing the UUID from user and group records (RHEL-143036) - userdb: add support for looking up users or groups by uuid. (RHEL-143036) - userdbctl: add --uuid filtering option (RHEL-143036) - userdbctl: add missing --uuid= to --help text (RHEL-143036) - userdb: fix typo (RHEL-143036) - man/userdbctl: fixup version info (RHEL-143036) - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034) - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034) - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112) - logind: support deserializing session leader through pidfdid (RHEL-53112) - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112) - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112) - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219) - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822) - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702) - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702) - hwdb: update rules (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - Add Razer Cobra mouse to hwdb (RHEL-72702) - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702) - hwdb: sort SDR devices by vendor name (RHEL-72702) - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702) - hwdb: run "update-hwdb" (RHEL-72702) - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702) - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702) - hwdb: add Airspy devices (RHEL-72702) - hwdb: add more devices (RHEL-72702) - hwdb: add MiriSDR MSi2500 devices (RHEL-72702) - hwdb: add missing Ettus Research B200 rule (RHEL-72702) - hwdb: add LimeSDR XTRX devices (RHEL-72702) - hwdb: add HydraSDR RFOne (RHEL-72702) - hwdb: add SDRplay devices (RHEL-72702) - hwdb: update (RHEL-72702) - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702) - Add Nulea M501 trackball to hwdb (RHEL-72702) - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702) - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702) - remove bonus line (RHEL-72702) - hwdb: drop trailing whitespace (RHEL-72702) - remove Nulea M501 usb entry from hwdb (RHEL-72702) - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702) - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702) - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702) - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702) - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702) - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702) - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702) - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702) - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702) - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702) - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702) - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702) - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702) - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702) - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702) - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702) - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702) - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702) - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702) - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702) - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702) - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702) - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702) - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702) - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702) - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard device as set 1 (appears as raw set 2) or as set 2 (appears as translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for posterity. (RHEL-72702) - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702) - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702) - hwdb: keyboard: uppercase apple id (RHEL-72702) - integritysetup: Add support for hmac-sha512 (RHEL-27852) - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852) - core: increment start limit counter only when we can start the unit (RHEL-115032) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032) - test: extend start limit interval (RHEL-115032) - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029) - man: fix typo (RHEL-143029) - test: fix test with -Dnetworkd=false (RHEL-143029) - ci: run apt-get update before running mkosi (RHEL-115001) - add GUID for clock group (RHEL-113051) - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767) - man: don't duplicate version in History section (RHEL-128767) - tools: ignore root element explicitly in check-version-history (RHEL-128767) - systemd-logind: Add signal section in man systemd-logind (RHEL-128767) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216) - timer: rebase last_trigger timestamp if needed (RHEL-118216) - man: fix a missing word (RHEL-120277) - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179) - udev: set clock group for PTP and RTC devices (RHEL-113051) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122) - strv: introduce string_strv_hashmap_remove() (RHEL-126937) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937) - spec: ukify: require python3-zstandard (RHEL-103523) - pam_systemd: honor session class provided via PAM environment (RHEL-109832) - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813) - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813) - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205) - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205) - test: add test case for issue #38765 (RHEL-112205) - strv: add strv_equal_ignore_order() helper (RHEL-109902) - pam: minor coding style tweaks (RHEL-109902) - user-record: add helper that checks if a provided user name matches a record (RHEL-109902) - user-record: add support for alias user names to user record (RHEL-109902) - pam_systemd_home: use right field name in error message (RHEL-109902) - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902) - homed: support user record aliases (RHEL-109902) - homectl: add support for creating users with alias names (RHEL-109902) - test: add test for homed alias and realm user resolution (RHEL-109902) - update TODO (RHEL-109902) - udev: create symlinks for s390 PTP devices (RHEL-120177) - test: build the crashing test binary outside of the test (RHEL-113920) - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920) - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920) - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135) - coredump: restore compatibility with older patterns (RHEL-104135) - coredump: wrap long lines, fix grammar in comments (RHEL-104135) - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135) - coredump: use %d in kernel core pattern (RHEL-104135) - coredump: also stop forwarding non-dumpable processes (RHEL-104135) - coredump: get rid of a bogus assertion (RHEL-104135) - coredump: add support for new %F PIDFD specifier (RHEL-104135) - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135) - coredump: introduce an enum to wrap dumpable constants (RHEL-104135) - Define helper to call PR_SET_DUMPABLE (RHEL-104135) - coredump: fix 0-passed-as-pointer warning (RHEL-104135) - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216) - test: check the next elapse timer timestamp after deserialization (RHEL-118216) - timer: don't run service immediately after restart of a timer (RHEL-118216) - test: store and compare just the property value (RHEL-118216) - Debrand for AlmaLinux - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163873) - nspawn: normalize pivot_root paths (RHEL-163873) - udev: check for invalid chars in various fields received from the kernel (RHEL-163879) - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-163879) - udev: ensure tag parsing stays within bounds (RHEL-163879) - udev: fix review mixup (RHEL-163879) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163879) - udev-builtin-net-id: print cescaped bad attributes (RHEL-163879) - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-152080) - ci: add bpftool workaround to codeql job too (RHEL-152080) - ci: fix workaround about bpftool for codeql (RHEL-152080) - ci: add bpftool workaround to coverity too (RHEL-152080) - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-152080) - cgroup: port some code over to path_startswith_full() (RHEL-152080) - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-152080) - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-152080) - core/cgroup: avoid one unnecessary strjoina() (RHEL-152080) - core: validate input cgroup path more prudently (RHEL-152080) - test-journal-dump: dump the headers of journal files (RHEL-106795) - journal: store counts, not byte sizes, in table size constants (RHEL-106795) - journal: treble field hash table size (RHEL-106795) - nspawn: move uid shift/chown() code into shared/ (RHEL-143036) - user-classification: add new "foreign" UID range (RHEL-143036) - userdb: synthesize stub user records for the foreign UID (RHEL-143036) - dissect: add new --shift command (RHEL-143036) - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036) - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036) - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036) - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036) - sd-varlink: add sd_varlink_get_description() call (RHEL-143036) - user-record: add helper for dispatching a disposition mask (RHEL-143036) - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036) - user-record: add some helpers for working with UserDBMatch (RHEL-143036) - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036) - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036) - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036) - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036) - update TODO (RHEL-143036) - JSON User/Group records: Add properties for UUIDs (RHEL-143036) - userdb: add support for printing the UUID from user and group records (RHEL-143036) - userdb: add support for looking up users or groups by uuid. (RHEL-143036) - userdbctl: add --uuid filtering option (RHEL-143036) - userdbctl: add missing --uuid= to --help text (RHEL-143036) - userdb: fix typo (RHEL-143036) - man/userdbctl: fixup version info (RHEL-143036) - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034) - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034) - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112) - logind: support deserializing session leader through pidfdid (RHEL-53112) - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112) - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112) - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219) - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822) - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702) - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702) - hwdb: update rules (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - Add Razer Cobra mouse to hwdb (RHEL-72702) - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702) - hwdb: sort SDR devices by vendor name (RHEL-72702) - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702) - hwdb: run "update-hwdb" (RHEL-72702) - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702) - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702) - hwdb: add Airspy devices (RHEL-72702) - hwdb: add more devices (RHEL-72702) - hwdb: add MiriSDR MSi2500 devices (RHEL-72702) - hwdb: add missing Ettus Research B200 rule (RHEL-72702) - hwdb: add LimeSDR XTRX devices (RHEL-72702) - hwdb: add HydraSDR RFOne (RHEL-72702) - hwdb: add SDRplay devices (RHEL-72702) - hwdb: update (RHEL-72702) - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702) - Add Nulea M501 trackball to hwdb (RHEL-72702) - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702) - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702) - remove bonus line (RHEL-72702) - hwdb: drop trailing whitespace (RHEL-72702) - remove Nulea M501 usb entry from hwdb (RHEL-72702) - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702) - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702) - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702) - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702) - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702) - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702) - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702) - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702) - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702) - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702) - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702) - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702) - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702) - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702) - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702) - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702) - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702) - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702) - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702) - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702) - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702) - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702) - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702) - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702) - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702) - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard device as set 1 (appears as raw set 2) or as set 2 (appears as translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for posterity. (RHEL-72702) - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702) - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702) - hwdb: keyboard: uppercase apple id (RHEL-72702) - integritysetup: Add support for hmac-sha512 (RHEL-27852) - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852) - core: increment start limit counter only when we can start the unit (RHEL-115032) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032) - test: extend start limit interval (RHEL-115032) - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029) - man: fix typo (RHEL-143029) - test: fix test with -Dnetworkd=false (RHEL-143029) - ci: run apt-get update before running mkosi (RHEL-115001) - add GUID for clock group (RHEL-113051) - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767) - man: don't duplicate version in History section (RHEL-128767) - tools: ignore root element explicitly in check-version-history (RHEL-128767) - systemd-logind: Add signal section in man systemd-logind (RHEL-128767) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216) - timer: rebase last_trigger timestamp if needed (RHEL-118216) - man: fix a missing word (RHEL-120277) - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179) - udev: set clock group for PTP and RTC devices (RHEL-113051) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122) - strv: introduce string_strv_hashmap_remove() (RHEL-126937) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937) - spec: ukify: require python3-zstandard (RHEL-103523) - pam_systemd: honor session class provided via PAM environment (RHEL-109832) - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813) - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813) - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205) - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205) - test: add test case for issue #38765 (RHEL-112205) - strv: add strv_equal_ignore_order() helper (RHEL-109902) - pam: minor coding style tweaks (RHEL-109902) - user-record: add helper that checks if a provided user name matches a record (RHEL-109902) - user-record: add support for alias user names to user record (RHEL-109902) - pam_systemd_home: use right field name in error message (RHEL-109902) - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902) - homed: support user record aliases (RHEL-109902) - homectl: add support for creating users with alias names (RHEL-109902) - test: add test for homed alias and realm user resolution (RHEL-109902) - update TODO (RHEL-109902) - udev: create symlinks for s390 PTP devices (RHEL-120177) - test: build the crashing test binary outside of the test (RHEL-113920) - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920) - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920) - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135) - coredump: restore compatibility with older patterns (RHEL-104135) - coredump: wrap long lines, fix grammar in comments (RHEL-104135) - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135) - coredump: use %d in kernel core pattern (RHEL-104135) - coredump: also stop forwarding non-dumpable processes (RHEL-104135) - coredump: get rid of a bogus assertion (RHEL-104135) - coredump: add support for new %F PIDFD specifier (RHEL-104135) - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135) - coredump: introduce an enum to wrap dumpable constants (RHEL-104135) - Define helper to call PR_SET_DUMPABLE (RHEL-104135) - coredump: fix 0-passed-as-pointer warning (RHEL-104135) - Debrand for AlmaLinux - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-152080) - ci: add bpftool workaround to codeql job too (RHEL-152080) - ci: fix workaround about bpftool for codeql (RHEL-152080) - ci: add bpftool workaround to coverity too (RHEL-152080) - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-152080) - cgroup: port some code over to path_startswith_full() (RHEL-152080) - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-152080) - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-152080) - core/cgroup: avoid one unnecessary strjoina() (RHEL-152080) - core: validate input cgroup path more prudently (RHEL-152080) - test-journal-dump: dump the headers of journal files (RHEL-106795) - journal: store counts, not byte sizes, in table size constants (RHEL-106795) - journal: treble field hash table size (RHEL-106795) - nspawn: move uid shift/chown() code into shared/ (RHEL-143036) - user-classification: add new "foreign" UID range (RHEL-143036) - userdb: synthesize stub user records for the foreign UID (RHEL-143036) - dissect: add new --shift command (RHEL-143036) - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036) - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036) - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036) - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036) - sd-varlink: add sd_varlink_get_description() call (RHEL-143036) - user-record: add helper for dispatching a disposition mask (RHEL-143036) - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036) - user-record: add some helpers for working with UserDBMatch (RHEL-143036) - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036) - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036) - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036) - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036) - update TODO (RHEL-143036) - JSON User/Group records: Add properties for UUIDs (RHEL-143036) - userdb: add support for printing the UUID from user and group records (RHEL-143036) - userdb: add support for looking up users or groups by uuid. (RHEL-143036) - userdbctl: add --uuid filtering option (RHEL-143036) - userdbctl: add missing --uuid= to --help text (RHEL-143036) - userdb: fix typo (RHEL-143036) - man/userdbctl: fixup version info (RHEL-143036) - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034) - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034) - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112) - logind: support deserializing session leader through pidfdid (RHEL-53112) - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112) - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112) - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219) - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822) - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702) - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702) - hwdb: update rules (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - Add Razer Cobra mouse to hwdb (RHEL-72702) - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702) - hwdb: sort SDR devices by vendor name (RHEL-72702) - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702) - hwdb: run "update-hwdb" (RHEL-72702) - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702) - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702) - hwdb: add Airspy devices (RHEL-72702) - hwdb: add more devices (RHEL-72702) - hwdb: add MiriSDR MSi2500 devices (RHEL-72702) - hwdb: add missing Ettus Research B200 rule (RHEL-72702) - hwdb: add LimeSDR XTRX devices (RHEL-72702) - hwdb: add HydraSDR RFOne (RHEL-72702) - hwdb: add SDRplay devices (RHEL-72702) - hwdb: update (RHEL-72702) - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702) - Add Nulea M501 trackball to hwdb (RHEL-72702) - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702) - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702) - remove bonus line (RHEL-72702) - hwdb: drop trailing whitespace (RHEL-72702) - remove Nulea M501 usb entry from hwdb (RHEL-72702) - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702) - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702) - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702) - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702) - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702) - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702) - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702) - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702) - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702) - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702) - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702) - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702) - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702) - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702) - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702) - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702) - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702) - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702) - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702) - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702) - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702) - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702) - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702) - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702) - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702) - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard device as set 1 (appears as raw set 2) or as set 2 (appears as translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for posterity. (RHEL-72702) - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702) - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702) - hwdb: keyboard: uppercase apple id (RHEL-72702) - integritysetup: Add support for hmac-sha512 (RHEL-27852) - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852) - core: increment start limit counter only when we can start the unit (RHEL-115032) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032) - test: extend start limit interval (RHEL-115032) - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029) - man: fix typo (RHEL-143029) - test: fix test with -Dnetworkd=false (RHEL-143029) - ci: run apt-get update before running mkosi (RHEL-115001) - add GUID for clock group (RHEL-113051) - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767) - man: don't duplicate version in History section (RHEL-128767) - tools: ignore root element explicitly in check-version-history (RHEL-128767) - systemd-logind: Add signal section in man systemd-logind (RHEL-128767) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216) - timer: rebase last_trigger timestamp if needed (RHEL-118216) - man: fix a missing word (RHEL-120277) - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179) - udev: set clock group for PTP and RTC devices (RHEL-113051) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122) - strv: introduce string_strv_hashmap_remove() (RHEL-126937) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937) - spec: ukify: require python3-zstandard (RHEL-103523) - pam_systemd: honor session class provided via PAM environment (RHEL-109832) - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813) - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813) - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205) - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205) - test: add test case for issue #38765 (RHEL-112205) - strv: add strv_equal_ignore_order() helper (RHEL-109902) - pam: minor coding style tweaks (RHEL-109902) - user-record: add helper that checks if a provided user name matches a record (RHEL-109902) - user-record: add support for alias user names to user record (RHEL-109902) - pam_systemd_home: use right field name in error message (RHEL-109902) - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902) - homed: support user record aliases (RHEL-109902) - homectl: add support for creating users with alias names (RHEL-109902) - test: add test for homed alias and realm user resolution (RHEL-109902) - update TODO (RHEL-109902) - udev: create symlinks for s390 PTP devices (RHEL-120177) - test: build the crashing test binary outside of the test (RHEL-113920) - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920) - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920) - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135) - coredump: restore compatibility with older patterns (RHEL-104135) - coredump: wrap long lines, fix grammar in comments (RHEL-104135) - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135) - coredump: use %d in kernel core pattern (RHEL-104135) - coredump: also stop forwarding non-dumpable processes (RHEL-104135) - coredump: get rid of a bogus assertion (RHEL-104135) - coredump: add support for new %F PIDFD specifier (RHEL-104135) - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135) - coredump: introduce an enum to wrap dumpable constants (RHEL-104135) - Define helper to call PR_SET_DUMPABLE (RHEL-104135) - coredump: fix 0-passed-as-pointer warning (RHEL-104135) - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216) - test: check the next elapse timer timestamp after deserialization (RHEL-118216) - timer: don't run service immediately after restart of a timer (RHEL-118216) - test: store and compare just the property value (RHEL-118216) - Debrand for AlmaLinux - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163873) - nspawn: normalize pivot_root paths (RHEL-163873) - udev: check for invalid chars in various fields received from the kernel (RHEL-163879) - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-163879) - udev: ensure tag parsing stays within bounds (RHEL-163879) - udev: fix review mixup (RHEL-163879) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163879) - udev-builtin-net-id: print cescaped bad attributes (RHEL-163879) - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-152080) - ci: add bpftool workaround to codeql job too (RHEL-152080) - ci: fix workaround about bpftool for codeql (RHEL-152080) - ci: add bpftool workaround to coverity too (RHEL-152080) - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-152080) - cgroup: port some code over to path_startswith_full() (RHEL-152080) - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-152080) - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-152080) - core/cgroup: avoid one unnecessary strjoina() (RHEL-152080) - core: validate input cgroup path more prudently (RHEL-152080) - test-journal-dump: dump the headers of journal files (RHEL-106795) - journal: store counts, not byte sizes, in table size constants (RHEL-106795) - journal: treble field hash table size (RHEL-106795) - nspawn: move uid shift/chown() code into shared/ (RHEL-143036) - user-classification: add new "foreign" UID range (RHEL-143036) - userdb: synthesize stub user records for the foreign UID (RHEL-143036) - dissect: add new --shift command (RHEL-143036) - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036) - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036) - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036) - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036) - sd-varlink: add sd_varlink_get_description() call (RHEL-143036) - user-record: add helper for dispatching a disposition mask (RHEL-143036) - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036) - user-record: add some helpers for working with UserDBMatch (RHEL-143036) - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036) - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036) - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036) - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036) - update TODO (RHEL-143036) - JSON User/Group records: Add properties for UUIDs (RHEL-143036) - userdb: add support for printing the UUID from user and group records (RHEL-143036) - userdb: add support for looking up users or groups by uuid. (RHEL-143036) - userdbctl: add --uuid filtering option (RHEL-143036) - userdbctl: add missing --uuid= to --help text (RHEL-143036) - userdb: fix typo (RHEL-143036) - man/userdbctl: fixup version info (RHEL-143036) - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034) - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034) - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112) - logind: support deserializing session leader through pidfdid (RHEL-53112) - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112) - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112) - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219) - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822) - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702) - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702) - hwdb: update rules (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - Add Razer Cobra mouse to hwdb (RHEL-72702) - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702) - hwdb: sort SDR devices by vendor name (RHEL-72702) - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702) - hwdb: run "update-hwdb" (RHEL-72702) - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702) - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702) - hwdb: add Airspy devices (RHEL-72702) - hwdb: add more devices (RHEL-72702) - hwdb: add MiriSDR MSi2500 devices (RHEL-72702) - hwdb: add missing Ettus Research B200 rule (RHEL-72702) - hwdb: add LimeSDR XTRX devices (RHEL-72702) - hwdb: add HydraSDR RFOne (RHEL-72702) - hwdb: add SDRplay devices (RHEL-72702) - hwdb: update (RHEL-72702) - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702) - Add Nulea M501 trackball to hwdb (RHEL-72702) - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702) - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702) - remove bonus line (RHEL-72702) - hwdb: drop trailing whitespace (RHEL-72702) - remove Nulea M501 usb entry from hwdb (RHEL-72702) - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702) - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702) - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702) - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702) - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702) - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702) - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702) - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702) - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702) - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702) - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702) - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702) - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702) - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702) - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702) - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702) - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702) - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702) - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702) - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702) - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702) - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702) - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702) - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702) - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702) - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard device as set 1 (appears as raw set 2) or as set 2 (appears as translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for posterity. (RHEL-72702) - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702) - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702) - hwdb: keyboard: uppercase apple id (RHEL-72702) - integritysetup: Add support for hmac-sha512 (RHEL-27852) - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852) - core: increment start limit counter only when we can start the unit (RHEL-115032) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032) - test: extend start limit interval (RHEL-115032) - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029) - man: fix typo (RHEL-143029) - test: fix test with -Dnetworkd=false (RHEL-143029) - ci: run apt-get update before running mkosi (RHEL-115001) - add GUID for clock group (RHEL-113051) - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767) - man: don't duplicate version in History section (RHEL-128767) - tools: ignore root element explicitly in check-version-history (RHEL-128767) - systemd-logind: Add signal section in man systemd-logind (RHEL-128767) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216) - timer: rebase last_trigger timestamp if needed (RHEL-118216) - man: fix a missing word (RHEL-120277) - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179) - udev: set clock group for PTP and RTC devices (RHEL-113051) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122) - strv: introduce string_strv_hashmap_remove() (RHEL-126937) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937) - spec: ukify: require python3-zstandard (RHEL-103523) - pam_systemd: honor session class provided via PAM environment (RHEL-109832) - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813) - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813) - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205) - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205) - test: add test case for issue #38765 (RHEL-112205) - strv: add strv_equal_ignore_order() helper (RHEL-109902) - pam: minor coding style tweaks (RHEL-109902) - user-record: add helper that checks if a provided user name matches a record (RHEL-109902) - user-record: add support for alias user names to user record (RHEL-109902) - pam_systemd_home: use right field name in error message (RHEL-109902) - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902) - homed: support user record aliases (RHEL-109902) - homectl: add support for creating users with alias names (RHEL-109902) - test: add test for homed alias and realm user resolution (RHEL-109902) - update TODO (RHEL-109902) - udev: create symlinks for s390 PTP devices (RHEL-120177) - test: build the crashing test binary outside of the test (RHEL-113920) - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920) - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920) - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135) - coredump: restore compatibility with older patterns (RHEL-104135) - coredump: wrap long lines, fix grammar in comments (RHEL-104135) - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135) - coredump: use %d in kernel core pattern (RHEL-104135) - coredump: also stop forwarding non-dumpable processes (RHEL-104135) - coredump: get rid of a bogus assertion (RHEL-104135) - coredump: add support for new %F PIDFD specifier (RHEL-104135) - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135) - coredump: introduce an enum to wrap dumpable constants (RHEL-104135) - Define helper to call PR_SET_DUMPABLE (RHEL-104135) - coredump: fix 0-passed-as-pointer warning (RHEL-104135) - Debrand for AlmaLinux - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-152080) - ci: add bpftool workaround to codeql job too (RHEL-152080) - ci: fix workaround about bpftool for codeql (RHEL-152080) - ci: add bpftool workaround to coverity too (RHEL-152080) - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-152080) - cgroup: port some code over to path_startswith_full() (RHEL-152080) - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-152080) - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-152080) - core/cgroup: avoid one unnecessary strjoina() (RHEL-152080) - core: validate input cgroup path more prudently (RHEL-152080) - test-journal-dump: dump the headers of journal files (RHEL-106795) - journal: store counts, not byte sizes, in table size constants (RHEL-106795) - journal: treble field hash table size (RHEL-106795) - nspawn: move uid shift/chown() code into shared/ (RHEL-143036) - user-classification: add new "foreign" UID range (RHEL-143036) - userdb: synthesize stub user records for the foreign UID (RHEL-143036) - dissect: add new --shift command (RHEL-143036) - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036) - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036) - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036) - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036) - sd-varlink: add sd_varlink_get_description() call (RHEL-143036) - user-record: add helper for dispatching a disposition mask (RHEL-143036) - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036) - user-record: add some helpers for working with UserDBMatch (RHEL-143036) - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036) - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036) - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036) - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036) - update TODO (RHEL-143036) - JSON User/Group records: Add properties for UUIDs (RHEL-143036) - userdb: add support for printing the UUID from user and group records (RHEL-143036) - userdb: add support for looking up users or groups by uuid. (RHEL-143036) - userdbctl: add --uuid filtering option (RHEL-143036) - userdbctl: add missing --uuid= to --help text (RHEL-143036) - userdb: fix typo (RHEL-143036) - man/userdbctl: fixup version info (RHEL-143036) - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034) - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034) - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112) - logind: support deserializing session leader through pidfdid (RHEL-53112) - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112) - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112) - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219) - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822) - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702) - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702) - hwdb: update rules (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - Add Razer Cobra mouse to hwdb (RHEL-72702) - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702) - hwdb: sort SDR devices by vendor name (RHEL-72702) - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702) - hwdb: run "update-hwdb" (RHEL-72702) - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702) - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702) - hwdb: add Airspy devices (RHEL-72702) - hwdb: add more devices (RHEL-72702) - hwdb: add MiriSDR MSi2500 devices (RHEL-72702) - hwdb: add missing Ettus Research B200 rule (RHEL-72702) - hwdb: add LimeSDR XTRX devices (RHEL-72702) - hwdb: add HydraSDR RFOne (RHEL-72702) - hwdb: add SDRplay devices (RHEL-72702) - hwdb: update (RHEL-72702) - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702) - Add Nulea M501 trackball to hwdb (RHEL-72702) - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702) - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702) - remove bonus line (RHEL-72702) - hwdb: drop trailing whitespace (RHEL-72702) - remove Nulea M501 usb entry from hwdb (RHEL-72702) - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702) - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702) - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702) - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702) - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702) - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702) - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702) - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702) - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702) - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702) - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702) - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702) - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702) - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702) - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702) - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702) - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702) - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702) - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702) - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702) - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702) - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702) - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702) - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702) - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702) - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard device as set 1 (appears as raw set 2) or as set 2 (appears as translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for posterity. (RHEL-72702) - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702) - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702) - hwdb: keyboard: uppercase apple id (RHEL-72702) - integritysetup: Add support for hmac-sha512 (RHEL-27852) - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852) - core: increment start limit counter only when we can start the unit (RHEL-115032) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032) - test: extend start limit interval (RHEL-115032) - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029) - man: fix typo (RHEL-143029) - test: fix test with -Dnetworkd=false (RHEL-143029) - ci: run apt-get update before running mkosi (RHEL-115001) - add GUID for clock group (RHEL-113051) - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767) - man: don't duplicate version in History section (RHEL-128767) - tools: ignore root element explicitly in check-version-history (RHEL-128767) - systemd-logind: Add signal section in man systemd-logind (RHEL-128767) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216) - timer: rebase last_trigger timestamp if needed (RHEL-118216) - man: fix a missing word (RHEL-120277) - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179) - udev: set clock group for PTP and RTC devices (RHEL-113051) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122) - strv: introduce string_strv_hashmap_remove() (RHEL-126937) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937) - spec: ukify: require python3-zstandard (RHEL-103523) - pam_systemd: honor session class provided via PAM environment (RHEL-109832) - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813) - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813) - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205) - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205) - test: add test case for issue #38765 (RHEL-112205) - strv: add strv_equal_ignore_order() helper (RHEL-109902) - pam: minor coding style tweaks (RHEL-109902) - user-record: add helper that checks if a provided user name matches a record (RHEL-109902) - user-record: add support for alias user names to user record (RHEL-109902) - pam_systemd_home: use right field name in error message (RHEL-109902) - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902) - homed: support user record aliases (RHEL-109902) - homectl: add support for creating users with alias names (RHEL-109902) - test: add test for homed alias and realm user resolution (RHEL-109902) - update TODO (RHEL-109902) - udev: create symlinks for s390 PTP devices (RHEL-120177) - test: build the crashing test binary outside of the test (RHEL-113920) - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920) - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920) - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135) - coredump: restore compatibility with older patterns (RHEL-104135) - coredump: wrap long lines, fix grammar in comments (RHEL-104135) - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135) - coredump: use %d in kernel core pattern (RHEL-104135) - coredump: also stop forwarding non-dumpable processes (RHEL-104135) - coredump: get rid of a bogus assertion (RHEL-104135) - coredump: add support for new %F PIDFD specifier (RHEL-104135) - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135) - coredump: introduce an enum to wrap dumpable constants (RHEL-104135) - Define helper to call PR_SET_DUMPABLE (RHEL-104135) - coredump: fix 0-passed-as-pointer warning (RHEL-104135) - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216) - test: check the next elapse timer timestamp after deserialization (RHEL-118216) - timer: don't run service immediately after restart of a timer (RHEL-118216) - test: store and compare just the property value (RHEL-118216) - Debrand for AlmaLinux - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163873) - nspawn: normalize pivot_root paths (RHEL-163873) - udev: check for invalid chars in various fields received from the kernel (RHEL-163879) - udev: ensure there is space for trailing NUL before calling sprintf (RHEL-163879) - udev: ensure tag parsing stays within bounds (RHEL-163879) - udev: fix review mixup (RHEL-163879) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163879) - udev-builtin-net-id: print cescaped bad attributes (RHEL-163879) - ci: re-enable bpf-framework option for build and unit test jobs (RHEL-152080) - ci: add bpftool workaround to codeql job too (RHEL-152080) - ci: fix workaround about bpftool for codeql (RHEL-152080) - ci: add bpftool workaround to coverity too (RHEL-152080) - path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-152080) - cgroup: port some code over to path_startswith_full() (RHEL-152080) - path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-152080) - sd-json: fix off-by-one issue when updating parent for array elements (RHEL-152080) - core/cgroup: avoid one unnecessary strjoina() (RHEL-152080) - core: validate input cgroup path more prudently (RHEL-152080) - test-journal-dump: dump the headers of journal files (RHEL-106795) - journal: store counts, not byte sizes, in table size constants (RHEL-106795) - journal: treble field hash table size (RHEL-106795) - nspawn: move uid shift/chown() code into shared/ (RHEL-143036) - user-classification: add new "foreign" UID range (RHEL-143036) - userdb: synthesize stub user records for the foreign UID (RHEL-143036) - dissect: add new --shift command (RHEL-143036) - userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036) - userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036) - userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036) - user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036) - sd-varlink: add sd_varlink_get_description() call (RHEL-143036) - user-record: add helper for dispatching a disposition mask (RHEL-143036) - user-record: rename USER_DISPOSITION_MASK_MAX → USER_DISPOSITION_MASK_ALL (RHEL-143036) - user-record: add some helpers for working with UserDBMatch (RHEL-143036) - varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036) - userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036) - userdbd: implement server side filtering in the Multiplexer API (RHEL-143036) - homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036) - update TODO (RHEL-143036) - JSON User/Group records: Add properties for UUIDs (RHEL-143036) - userdb: add support for printing the UUID from user and group records (RHEL-143036) - userdb: add support for looking up users or groups by uuid. (RHEL-143036) - userdbctl: add --uuid filtering option (RHEL-143036) - userdbctl: add missing --uuid= to --help text (RHEL-143036) - userdb: fix typo (RHEL-143036) - man/userdbctl: fixup version info (RHEL-143036) - user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034) - homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034) - logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112) - logind: support deserializing session leader through pidfdid (RHEL-53112) - TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112) - logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112) - Revert "coredump: lock down EnterNamespace= mount even more" (RHEL-95219) - coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822) - hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702) - hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702) - hwdb: update rules (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - Add Razer Cobra mouse to hwdb (RHEL-72702) - hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702) - hwdb: sort SDR devices by vendor name (RHEL-72702) - 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702) - hwdb: run "update-hwdb" (RHEL-72702) - Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702) - Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702) - hwdb: add Airspy devices (RHEL-72702) - hwdb: add more devices (RHEL-72702) - hwdb: add MiriSDR MSi2500 devices (RHEL-72702) - hwdb: add missing Ettus Research B200 rule (RHEL-72702) - hwdb: add LimeSDR XTRX devices (RHEL-72702) - hwdb: add HydraSDR RFOne (RHEL-72702) - hwdb: add SDRplay devices (RHEL-72702) - hwdb: update (RHEL-72702) - hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702) - Add Nulea M501 trackball to hwdb (RHEL-72702) - add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702) - remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702) - remove bonus line (RHEL-72702) - hwdb: drop trailing whitespace (RHEL-72702) - remove Nulea M501 usb entry from hwdb (RHEL-72702) - test/parse_hwdb: wrap Or inside an And in a Group (RHEL-72702) - rules: extend 60-input-id.rules to allow for bus/vid/pid/name matches (RHEL-72702) - hwdb: don't tag a named Mouse device as pointingstick (RHEL-72702) - hwdb: Add V64x_V65xAU to list of Clevo models where scancode f7+f8 get mapped to touchpad-toggle (RHEL-72702) - hwdb: gpd micropc2 sensor (#39493) (RHEL-72702) - hwdb: add support for the Logitech MX Master 4 (#39490) (RHEL-72702) - hwdb: add entry for Acer Switch One 10 (SW1-011) (#39716) (RHEL-72702) - keymap: Ignore brightness keys on Dell Inspiron 3505 to avoid double events (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: Add Elecom IST Pro trackball (#39762) (RHEL-72702) - hwdb: Fix keyboard backlight keys on Acer Nitro 5 AN515-58 (#39769) (RHEL-72702) - hwdb: Add alternative mode for Beacn Mic (#39868) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: add ProtoArc EM01 NL mouse configuration (RHEL-72702) - hwdb: add Magic Trackpad v2 USB-C (2024) to quirks (#40032) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad D330 accel mount matrix (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: update autosuspend rules (RHEL-72702) - hwdb: Add ACCEL_MOUNT_MATRIX for variant of TERRA PAD 1061 (RHEL-72702) - hwdb: sensor: Add HP OmniBook Ultra Flip 14 accel mount matrix (#40076) (RHEL-72702) - hwdb: sensor: Remove Lenovo IdeaPad Duet 3 accel mount matrix (#40075) (RHEL-72702) - hwdb: Fix ACCEL_MOUNT_MATRIX for Lenovo Ideapad MIIX 310-ICR (#40067) (RHEL-72702) - hwdb: fix unstable button triggering on Mipad 2 under GNOME (#40071) (RHEL-72702) - Update hwdb (RHEL-72702) - hwdb: touchpad config for Apple MacbookPro12,1 Early 2015 (RHEL-72702) - Add Lenovo Y50-70 touchpad to 60-evdev.hwdb (RHEL-72702) - quirks: sensor: add info about ACPI accel_matrix (RHEL-72702) - quirks: Re-add D330 accel_matrix as identity one (#40226) (RHEL-72702) - quirks: touchpad: Set Duet 3 bt touchpad internal (RHEL-72702) - hwdb: Add missing scancodes for Lenovo Legion devices (RHEL-72702) - hwdb: Add missing vendor names for older AYANEO devices Adds AYADEVICE and AYA NEO vendor names. Early founders editon and 2021 models used these DMI values instead of AYANEO (RHEL-72702) - hwdb: add matrix for ASUS 2-in-1 T101HA (RHEL-72702) - hwdb: add HP EliteBoard Mic mute key mapping (RHEL-72702) - hwdb: Add GPD Pocket 4 chassis quirk (RHEL-72702) - hwdb: make three more hwdb files parsed by parse_hwdb.py (RHEL-72702) - hwdb: set touchpad resolution for all ThinkPad T49x chassis laptops (RHEL-72702) - hwdb: Update Lenovo Legion Go Models - Different BIOS versions of the Legion Go 2 can init the keyboard device as set 1 (appears as raw set 2) or as set 2 (appears as translated set 2). Add the Legion Go 2 to the Translated list. - While at it, specify the models in a more verbose manner for posterity. (RHEL-72702) - hwdb: Add extended SteelSeries Arctis headset device support (#40479) (RHEL-72702) - hwdb: keyboard: fix typo CAPSLOCK to NUMLOCK (RHEL-72702) - hwdb: keyboard: uppercase apple id (RHEL-72702) - integritysetup: Add support for hmac-sha512 (RHEL-27852) - integritysetup: Add PHMAC algorithm to list of known algorithms (RHEL-27852) - core: increment start limit counter only when we can start the unit (RHEL-115032) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-115032) - test: extend start limit interval (RHEL-115032) - userdbctl: optionally show user/group data from JSON filerather than from system (RHEL-143029) - man: fix typo (RHEL-143029) - test: fix test with -Dnetworkd=false (RHEL-143029) - ci: run apt-get update before running mkosi (RHEL-115001) - add GUID for clock group (RHEL-113051) - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767) - man: don't duplicate version in History section (RHEL-128767) - tools: ignore root element explicitly in check-version-history (RHEL-128767) - systemd-logind: Add signal section in man systemd-logind (RHEL-128767) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216) - timer: rebase last_trigger timestamp if needed (RHEL-118216) - man: fix a missing word (RHEL-120277) - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179) - udev: set clock group for PTP and RTC devices (RHEL-113051) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122) - strv: introduce string_strv_hashmap_remove() (RHEL-126937) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937) - spec: ukify: require python3-zstandard (RHEL-103523) - pam_systemd: honor session class provided via PAM environment (RHEL-109832) - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813) - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813) - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205) - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205) - test: add test case for issue #38765 (RHEL-112205) - strv: add strv_equal_ignore_order() helper (RHEL-109902) - pam: minor coding style tweaks (RHEL-109902) - user-record: add helper that checks if a provided user name matches a record (RHEL-109902) - user-record: add support for alias user names to user record (RHEL-109902) - pam_systemd_home: use right field name in error message (RHEL-109902) - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902) - homed: support user record aliases (RHEL-109902) - homectl: add support for creating users with alias names (RHEL-109902) - test: add test for homed alias and realm user resolution (RHEL-109902) - update TODO (RHEL-109902) - udev: create symlinks for s390 PTP devices (RHEL-120177) - test: build the crashing test binary outside of the test (RHEL-113920) - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920) - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920) - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135) - coredump: restore compatibility with older patterns (RHEL-104135) - coredump: wrap long lines, fix grammar in comments (RHEL-104135) - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135) - coredump: use %d in kernel core pattern (RHEL-104135) - coredump: also stop forwarding non-dumpable processes (RHEL-104135) - coredump: get rid of a bogus assertion (RHEL-104135) - coredump: add support for new %F PIDFD specifier (RHEL-104135) - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135) - coredump: introduce an enum to wrap dumpable constants (RHEL-104135) - Define helper to call PR_SET_DUMPABLE (RHEL-104135) - coredump: fix 0-passed-as-pointer warning (RHEL-104135) - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Fix RHEL-132752 - Fix RHEL-132057 - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-95272 - RHEL-RHEL-89808: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-78062: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-52491 - Upgrade to v1.13.1 Resolves: RHEL-72785 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix image mode deployment of directory keys - Bump release for October 2024 mass rebuild: - Rebuild due to updated llhttp - Weaken systemd dependency - Bump release for June 2024 mass rebuild - riscv64: Give more time for tests to finish - Enable RHEL gating for tang - Backport follow-up fix for llhttp conversion - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use llhttp instead of http-parser - Rebuild for gating test changes - Add gating.yaml - Fix RHEL-64990 (dbroot fix and disable unsupported fabrics) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix kmod import - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - restoreconfig: do not return success if the file doesn't exist - Fix syntax warning RHEL-78512 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to version v2.1.58 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Remove Requires:python3-docs for tbb-doc subpackage - Rename 32-bit arch /usr/lib/pkgconfig/tbb32.pc to tbb.pc - Avoid python3-docs dependency on RHEL - Add patch for strict aliasing violation - Rebase to version 2021.11.0 - New -bind subpackage for the NUMA support library - Build with cmake - Minor spec file cleanups - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Remove Requires:python3-docs for tbb-doc subpackage - Rename 32-bit arch /usr/lib/pkgconfig/tbb32.pc to tbb.pc - Avoid python3-docs dependency on RHEL - Add patch for strict aliasing violation - Rebase to version 2021.11.0 - New -bind subpackage for the NUMA support library - Build with cmake - Minor spec file cleanups - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Remove Requires:python3-docs for tbb-doc subpackage - Rename 32-bit arch /usr/lib/pkgconfig/tbb32.pc to tbb.pc - Avoid python3-docs dependency on RHEL - Add patch for strict aliasing violation - Rebase to version 2021.11.0 - New -bind subpackage for the NUMA support library - Build with cmake - Minor spec file cleanups - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Remove Requires:python3-docs for tbb-doc subpackage - Rename 32-bit arch /usr/lib/pkgconfig/tbb32.pc to tbb.pc - Avoid python3-docs dependency on RHEL - Add patch for strict aliasing violation - Rebase to version 2021.11.0 - New -bind subpackage for the NUMA support library - Build with cmake - Minor spec file cleanups - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2231272 - Converted license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version Resolves: rhbz#2231272 - Converted license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fixing gating.yaml for RHEL10 - Adding rpminspect.yaml - Resolves: RHEL-32708 - Crafted .pcap file may lead to Denial of Service - New version of tcpslice, 1.7 (rhbz #2263644) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix PGM option printing - Enabling BIG TCP packets in tcpdump - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - New version 4.99.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to tcsh-6.24.10 (#2185572) - migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to tcsh-6.24.07 (#2147466) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 2.5.12 bump - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)" - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - 2.5.11 bump - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)" - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.0 - Update to 45.rc - Add -devel subpackage for newly added pkg-config file - Update to 45.beta - Package up translations - Add check section for desktop-file-validate and meson tests - Initial Fedora packaging - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix tracefile setting, C type errors (#2255510) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix tracefile setting, C type errors (#2255510) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild (icu) - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 5.3.4 - Update to 5.3.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuild (mingw-icu) - Update to 5.3.2 - Resolves: CVE-2026-73066 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Version 13.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Version 13.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - disable Build in parallel due to random build error Related: RHEL-34826 - add missing lua-uni-algos and dependency in texlive-luaotfload Related: RHEL-34826 - texlive should use it's own xpdf based library - fixed rpminspect issues - fixed source urls Related: RHEL-34826 - Resolves: RHEL-34826, rebuilt against new xpdf - Rebuilt for ICU 74 - cleanup deps - remove LPPL-1.3 as it is not recognized by SPDX - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - Exclude tex4ht-java classes for i686 as it requires javac for building - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript - Resolves: RHEL-69757, fix python-sphinx FTBFS - Add two subpackages for texlive 2024: firstaid, hypcap can't find latex2e-first-aid-for-external-files.ltx file - Drop luajittex Resolves: RHEL-65862 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - include luajit for x86_64 only as it only supports this arch - fix requirement on tex-kpathsea, texlive-base - fix unicode issues - add rpminspect.yaml Related: RHEL-59868 - removed obsoleted patch - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian - fixed texlive-docindex conflict with texlive-base Related: RHEL-59868 Resolves: RHEL-53483, RHEL-53786 - Resolves: RHEL-59868, update to texlive-2024 - Resolves: RHEL-45900, convert license to SPDX - Fixed eufm font mapping - Added missing license and fixed file list in texlive-plain Related: RHEL-34826 - Bump release for June 2024 mass rebuild - tftp: propagate exit codes in non-interactive mode (RHEL-102114) - fix creation of /var/lib/tftpboot in image mode (RHEL-79983) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - gating enablement rebuild (RHEL-25853) - gating enablement rebuild (RHEL-25853) - gating enablement rebuild (RHEL-25853) - apply fixes to true positives reported by static analyzers from RHEL 9 (RHEL-25853) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fix buffer overflow in remap genmatchstring() with inverse rules (CVE-2026-85234) (RHEL-260604) - tftp: propagate exit codes in non-interactive mode (RHEL-102114) - fix creation of /var/lib/tftpboot in image mode (RHEL-79983) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - tftp: propagate exit codes in non-interactive mode (RHEL-102114) - fix creation of /var/lib/tftpboot in image mode (RHEL-79983) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - gating enablement rebuild (RHEL-25853) - gating enablement rebuild (RHEL-25853) - gating enablement rebuild (RHEL-25853) - apply fixes to true positives reported by static analyzers from RHEL 9 (RHEL-25853) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fix buffer overflow in remap genmatchstring() with inverse rules (CVE-2026-85234) (RHEL-260604) - tftp: propagate exit codes in non-interactive mode (RHEL-102114) - fix creation of /var/lib/tftpboot in image mode (RHEL-79983) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Remove transfig dependency for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - AlmaLinux changes - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.5.0 ESR - Update to 140.4.0 ESR - AlmaLinux changes - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.5.0 ESR - AlmaLinux changes - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - AlmaLinux changes - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - AlmaLinux changes - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - AlmaLinux changes - Update to 140.16.0 ESR - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227 - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - AlmaLinux changes - Update to 140.17.0 ESR - Update to 140.16.0 ESR - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227 - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - what's this? a new release? okay. - Converted license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Converted license to SPDX - New version Related: rhbz#2231272 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Converted license to SPDX - New version Related: rhbz#2231272 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release to validate gating - Bump release for June 2024 mass rebuild - Release v14 - configure: correctly handle systemd versions before 245 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format). - Release v13 - Update the Fedora license - MAN: Add missing comma in tlog-rec-session.conf - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Support added for post-quantum cryptography Resolves: RHEL-93093 - Update OpenSSL certificates set up Resolves: RHEL-86503 - Remove deprecated path from systemd service file Resolves: RHEL-86502 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add epoch prefix to version-release in requires - Add rpminspect.yaml to adjust configuration for rpminspect run Resolves: RHEL-56884 - Bump release for June 2024 mass rebuild - Add riscv64 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Support added for post-quantum cryptography Resolves: RHEL-93093 - Update OpenSSL certificates set up Resolves: RHEL-86503 - Remove deprecated path from systemd service file Resolves: RHEL-86502 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add epoch prefix to version-release in requires - Add rpminspect.yaml to adjust configuration for rpminspect run Resolves: RHEL-56884 - Bump release for June 2024 mass rebuild - Add riscv64 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuild for Konflux (Resolves: RHEL-84822) - Rebuild for Konflux - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Exclude i686 architecture from build - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Resolves: RHEL-78899 Add missing Obsoletes - Resolves: RHEL-51222 Upgrade tomcat to 10.1.8 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Exclude i686 architecture from build - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Exclude i686 architecture from build - Resolves: RHEL-192808 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192650 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219552 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219580 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238205 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238217 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238263 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238285 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Resolves: RHEL-78899 Add missing Obsoletes - Resolves: RHEL-51222 Upgrade tomcat to 10.1.8 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Exclude i686 architecture from build - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Exclude i686 architecture from build - Resolves: RHEL-192808 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192650 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219552 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219580 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238205 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238217 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238263 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238285 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Resolves: RHEL-78899 Add missing Obsoletes - Resolves: RHEL-51222 Upgrade tomcat to 10.1.8 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Exclude i686 architecture from build - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Exclude i686 architecture from build - Resolves: RHEL-192808 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192650 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219552 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219580 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238205 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238217 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238263 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238285 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Resolves: RHEL-78899 Add missing Obsoletes - Resolves: RHEL-51222 Upgrade tomcat to 10.1.8 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Exclude i686 architecture from build - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Exclude i686 architecture from build - Resolves: RHEL-192808 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192650 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219552 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219580 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238205 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238217 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238263 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238285 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Add tomcat-jakartaee-migration package to RHEL 10 - Exclude i686 architecture from build - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Resolves: RHEL-78899 Add missing Obsoletes - Resolves: RHEL-51222 Upgrade tomcat to 10.1.8 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Exclude i686 architecture from build - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Exclude i686 architecture from build - Resolves: RHEL-192808 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192650 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219552 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219580 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238205 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238217 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238263 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238285 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Resolves: RHEL-78899 Add missing Obsoletes - Resolves: RHEL-51222 Upgrade tomcat to 10.1.8 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Exclude i686 architecture from build - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Exclude i686 architecture from build - Resolves: RHEL-192808 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192650 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219552 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219580 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238205 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238217 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238263 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238285 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Resolves: RHEL-78899 Add missing Obsoletes - Resolves: RHEL-51222 Upgrade tomcat to 10.1.8 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Exclude i686 architecture from build - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Exclude i686 architecture from build - Resolves: RHEL-192808 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192650 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219552 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219580 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238205 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238217 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238263 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238285 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Resolves: RHEL-78899 Add missing Obsoletes - Resolves: RHEL-51222 Upgrade tomcat to 10.1.8 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Exclude i686 architecture from build - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677) - Resolves: RHEL-87273 tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316) - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool - Exclude i686 architecture from build - Resolves: RHEL-192808 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192650 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219552 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219580 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238205 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238217 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238263 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238285 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-168577 Remove unnecessary patch - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132560 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-132526 tomcat: Denial of service (CVE-2025-61795) - Exclude i686 architecture from build - Resolves: RHEL-102184 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108906 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108900 tomcat: Apache FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108902 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108904 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108908 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - add Obsoletes to aid upgrade path from tomcat-9.x Resolves: RHEL-79313 - Exclude i686 architecture from build - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Exclude i686 architecture from build - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Exclude i686 architecture from build - Resolves: RHEL-192813 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192651 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219557 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219575 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238196 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238216 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238254 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238289 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - add Obsoletes to aid upgrade path from tomcat-9.x Resolves: RHEL-79313 - Exclude i686 architecture from build - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Exclude i686 architecture from build - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Exclude i686 architecture from build - Resolves: RHEL-192813 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192651 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219557 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219575 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238196 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238216 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238254 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238289 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - add Obsoletes to aid upgrade path from tomcat-9.x Resolves: RHEL-79313 - Exclude i686 architecture from build - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Exclude i686 architecture from build - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Exclude i686 architecture from build - Resolves: RHEL-192813 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192651 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219557 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219575 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238196 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238216 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238254 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238289 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - add Obsoletes to aid upgrade path from tomcat-9.x Resolves: RHEL-79313 - Exclude i686 architecture from build - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Exclude i686 architecture from build - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Exclude i686 architecture from build - Resolves: RHEL-192813 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192651 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219557 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219575 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238196 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238216 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238254 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238289 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - add Obsoletes to aid upgrade path from tomcat-9.x Resolves: RHEL-79313 - Exclude i686 architecture from build - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Exclude i686 architecture from build - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Exclude i686 architecture from build - Resolves: RHEL-192813 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192651 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219557 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219575 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238196 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238216 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238254 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238289 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - add Obsoletes to aid upgrade path from tomcat-9.x Resolves: RHEL-79313 - Exclude i686 architecture from build - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Exclude i686 architecture from build - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Exclude i686 architecture from build - Resolves: RHEL-192813 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192651 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219557 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219575 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238196 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238216 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238254 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238289 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - add Obsoletes to aid upgrade path from tomcat-9.x Resolves: RHEL-79313 - Exclude i686 architecture from build - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Exclude i686 architecture from build - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Exclude i686 architecture from build - Resolves: RHEL-192813 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192651 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219557 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219575 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238196 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238216 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238254 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238289 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Exclude i686 architecture from build - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - add Obsoletes to aid upgrade path from tomcat-9.x Resolves: RHEL-79313 - Exclude i686 architecture from build - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Exclude i686 architecture from build - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91750 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-94960 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Exclude i686 architecture from build - Resolves: RHEL-192813 tomcat: HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192651 tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219557 tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219575 tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238196 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238216 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238254 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238289 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734) - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168243 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124496 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132559 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102186 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108485 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108493 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108501 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108509 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108522 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108517 tomcat: Denial of service (CVE-2025-53506) - Fall back to 'getent passwd' when SHELL is unset Resolves: RHEL-152803 - Update to 0.3 Resolves: RHEL-117476 - Update to 0.2 - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787 Resolves: RHEL-104450 - Update to 0.1.2 Resolves: RHEL-95210 - Add 'Requires: flatpak-session-helper' Resolves: RHEL-97099 - Update to 0.1.1 Resolves: RHEL-61904 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 0.0.99.6 Resolves: RHEL-61579 - Rebuild for CVE-2024-24791 Resolves: RHEL-47199 - Silence 'rpminspect --tests=stack-prot' - Silence 'rpminspect --tests=annocheck' (part 2) Resolves: RHEL-33522 - Fix rpminspect pathmigration issue Resolves: RHEL-70711 - Fix rpminspect permissions and capabilities issue Resolves: RHEL-70711 - torque: add basic sanity test for CI gating Resolves: RHEL-70711 - Fix rpminspect issue Resolves: RHEL-70711 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 3.0.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix policycoreutils-python-utils dependency for RHEL 8+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Skip SHA1-based tests, use SHA256 when possible Resolves: RHEL-64906 - Bump release for June 2024 mass rebuild - tito: use release tagger (adrian.freihofer@gmail.com) - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]." (adrian.freihofer@gmail.com) - Automatic commit of package [tpm2-openssl] release [1.2.1-1]. (adrian.freihofer@gmail.com) - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com) - new package built with tito - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 1.9.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add missing requires for the tools subpackage (#2148392) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Migrate license to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 1.9.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add missing requires for the tools subpackage (#2148392) - Backport upstream fixes Resolves: RHEL-94930 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for gating Resolves: RHEL-23199 - Update to 5.7 Resolves: RHEL-23199 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 5.6 - Migrate license to SPDX - Backport upstream fixes Resolves: RHEL-94936 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Version bump - Resolves: RHEL-54173 - Remove OpenSSL engine API dependency - Resolves: RHEL-54173 - Bump release for June 2024 mass rebuild - Update to 4.1.3 Resolves: RHEL-23207 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Split out fapi subpackage Resolves: rhbz#2252535 - Migrate license to SPDX - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Disable stemmer support as libstemmer is being removed from RHEL 10 - Update to 3.7.3 and sync with Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.7.alpha - Backport upstream patch to fix C compatibility issue in Meson probe - Update to 3.6.0 - Update to 3.6.rc - Update to 3.6.beta - Update to 3.7.4 and sync the macro naming with Fedora Resolves: RHEL-71387 - Drop references to non-existent tracker-extract-3.service Resolves: RHEL-70242 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - totem-pl-parser won't be part of RHEL 10 - Bump release for June 2024 mass rebuild - Update to 3.7.3 and sync with Fedora - Bypass kernel landlock check during build - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 3.7.alpha - Add gating - Initial commit on c10s - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66636 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66613 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181667 - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66636 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66613 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181667 - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66636 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66613 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181667 - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66636 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66613 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181667 - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66636 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66613 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181667 - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66636 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66613 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181667 - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66636 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66613 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181667 - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66636 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66613 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181667 - new release - rebased tuned to latest upstream related: RHEL-123608 - new release - rebased tuned to latest upstream resolves: RHEL-123608 - cpu-partitioning: autodetect dracut hook directory, systemd workaround resolves: RHEL-40619 - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states resolves: RHEL-142285 - man: fixed instance_acquire_devices example in tuned-adm man resolves: RHEL-90575 - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - cpu-partitioning: added initrd generation dracut/systemd workarounds resolves: RHEL-120175 - new release - rebased tuned to latest upstream related: RHEL-94809 - new release - rebased tuned to latest upstream resolves: RHEL-94809 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance resolves: RHEL-94842 - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option resolves: RHEL-88238 - functions: silenced errors if module kvm_intel does not exist - functions: make calc_isolated_cores return CPU ranges - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports resolves: RHEL-79913 - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: disable appropriate P-State drivers - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher resolves: RHEL-97087 - udev-settle: obey udev buffer size and handle possible tracebacks resolves: RHEL-92637 - daemon: re-raise daemon init exception in no-daemon mode - vm: deprecate dirty_ratio in favour of dirty_bytes with percents - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-94185 - new release - rebased tuned to latest upstream related: RHEL-70454 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion - new release - rebased tuned to latest upstream related: RHEL-70454 - sap-hana: Set transparent_hugepages to madvise resolves: RHEL-68454 - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback resolves: RHEL-74384 - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed resolves: RHEL-69933 - plugin_scheduler: postpone cgroup blacklist check, double-check after fail - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add i686 support - Update to tzdata-2026a (RHEL-154023) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135156) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-105042) - Update to tzdata-2025b (RHEL-84740) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74296) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Harden against links to removed zones - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add java patch to fix incorrect calculations for Africa/Casablanca starting in 2027. (RHEL-32178) - Remove hardcoded versioned path to javac. - Add i686 support - Update to tzdata-2026b (RHEL-170780) - British Columbia’s 2026-03-08 spring forward is expected to be its last transition as it moves to permanent -07. - Update to tzdata-2026a (RHEL-154023) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135156) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-105042) - Update to tzdata-2025b (RHEL-84740) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74296) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Harden against links to removed zones - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add i686 support - Update to tzdata-2026c (RHEL-194097) - Alberta moved to permanent -06 on 2026-06-18. - Morocco moves to permanent +00 on 2026-09-20. - Update to tzdata-2026b (RHEL-170780) - British Columbia’s 2026-03-08 spring forward is expected to be its last transition as it moves to permanent -07. - Update to tzdata-2026a (RHEL-154023) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135156) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-105042) - Update to tzdata-2025b (RHEL-84740) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74296) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Harden against links to removed zones - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add i686 support - Update to tzdata-2026e (262042) - Manitoba moves to permanent -05 on 2026-10-31. - Update to tzdata-2026d (RHEL-262042) - Canada's Northwest Territories moved to permanent -06 on 2026-08-21. - Obsolescent settings like TZ="EST5EDT" now conform better to POSIX. - Update to tzdata-2026c (RHEL-194097) - Alberta moved to permanent -06 on 2026-06-18. - Morocco moves to permanent +00 on 2026-09-20. - Update to tzdata-2026b (RHEL-170780) - British Columbia’s 2026-03-08 spring forward is expected to be its last transition as it moves to permanent -07. - Update to tzdata-2026a (RHEL-154023) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135156) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-105042) - Update to tzdata-2025b (RHEL-84740) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74296) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Update to upstream release 1.19.1 - Resolves: RHEL-98259 - Update to upstream release 1.18.1 - Resolves: RHEL-94486 - Enable riscv64 - Fix Unhandled patch file issue Resolves: RHEL-24811 - Update to upstream release 1.17.0 Resolves: RHEL-24811 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to upstream release 1.19.1 - Resolves: RHEL-98259 - Update to upstream release 1.18.1 - Resolves: RHEL-94486 - Enable riscv64 - Fix Unhandled patch file issue Resolves: RHEL-24811 - Update to upstream release 1.17.0 Resolves: RHEL-24811 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to upstream release 1.19.1 - Resolves: RHEL-98259 - Update to upstream release 1.18.1 - Resolves: RHEL-94486 - Enable riscv64 - Fix Unhandled patch file issue Resolves: RHEL-24811 - Update to upstream release 1.17.0 Resolves: RHEL-24811 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to upstream release 1.19.1 - Resolves: RHEL-98259 - Update to upstream release 1.18.1 - Resolves: RHEL-94486 - Enable riscv64 - Fix Unhandled patch file issue Resolves: RHEL-24811 - Update to upstream release 1.17.0 Resolves: RHEL-24811 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to upstream release 1.19.1 - Resolves: RHEL-98259 - Update to upstream release 1.18.1 - Resolves: RHEL-94486 - Enable riscv64 - Fix Unhandled patch file issue Resolves: RHEL-24811 - Update to upstream release 1.17.0 Resolves: RHEL-24811 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: - Disable udev-hid-bpf-testing on Centos/RHEL - Hide the /usr/lib/firmware install path behind a variable - Add gating.yaml - Initial package import - Bump release for October 2024 mass rebuild: - Disable udev-hid-bpf-testing on Centos/RHEL - Hide the /usr/lib/firmware install path behind a variable - Add gating.yaml - Initial package import - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - confined: make "-l" non optional - confined: allow asynchronous I/O operations - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add option to generate custom policy for a confined user - New release - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Show diff when checking formatting - Fix several lint findings - Fix generating policy for Crio mounts - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - Bump release for June 2024 mass rebuild - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437) - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - Bump release for June 2024 mass rebuild - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437) - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - Bump release for June 2024 mass rebuild - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437) - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - Bump release for June 2024 mass rebuild - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437) - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - Bump release for June 2024 mass rebuild - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437) - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - AlmaLinux changes: Enable Btrfs support - Disable LSM module for i686 architecture - Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566) - Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590) - Version 2.11.0 (RHEL-114981) - tests: Rework nvme revision check (RHEL-90572) - tests: Adapt for missing fstab and crypttab (RHEL-78987) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406) - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012) - Rebase to upstream 2.10.90 (pre-)release - lvm2: Try opening for unused device detection harder (RHEL-39935) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix Requires: for modules - Fix gating tests - Rebase to git snapshot as of 2024-07-25 - remove -tests sub-rpm - switch testing to tmt - update to version 25.12 - update to version 25.10 - update to version 25.9 - update to bugfix release 25.7.3 - update to bugfix release 25.7.2 - update to 25.7, switch to pyproject rpm macros - rebase to version 25.4.1 - specfile: do not use %{_libdir} - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Add new DNSSEC root anchor 38696 - Make root.key maintained unmodified - Create root key if missing automatically - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Add unit test for the vulnerability too - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Add new DNSSEC root anchor 38696 - Make root.key maintained unmodified - Create root key if missing automatically - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Add unit test for the vulnerability too - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Add new DNSSEC root anchor 38696 - Make root.key maintained unmodified - Create root key if missing automatically - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Add unit test for the vulnerability too - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Add new DNSSEC root anchor 38696 - Make root.key maintained unmodified - Create root key if missing automatically - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Add unit test for the vulnerability too - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Add new DNSSEC root anchor 38696 - Make root.key maintained unmodified - Create root key if missing automatically - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Change the default of tls-use-system-policy-versions at build-time - Switch TLS configuration to follow TLS sockets by crypto-policy again - Export utils subpackage into AppStream repository - Add Yorgos PGP key for validation - Update to 1.24.2 - Fixes CVE-2025-11411 - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Fix CVE-2026-33278 - Recreate configure unconditionally - Add byacc into BuildRequires - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Fix CVE-2026-42959 - Fix CVE-2026-42944 - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Add upstream unit test for CVE-2026-40622 - Fix CVE-2026-44390: DoS with large RRsets - Fix CVE-2026-40622: cache manipulation via 'ghost domain names' attack - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Add unit test for the vulnerability too - Backport additional fix of locks during initialization - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Add unit tests for CVE-2026-{44690,55973} - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance - Fix CVE-2026-41292: DoS via excessive EDNS options - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-49439 - Update the license tag to Unicode-3.0 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Unicode 15.1 released - add license.txt - update to draft 15.1.0: https://unicode.org/versions/Unicode15.1.0/ - do not add copyright.html file from website - add missing Unicode-TOU license tag - Migrate to SPDX license expression - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Switch Java compiler source/target to 1.8 - Resolves: RHEL-52705 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix out-of-bounds stack write (GCC 14 compatibility) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - New Release 2.3.12 (lurcher) - Don't check state with shared env (lurcher) - Add --enable-singleenv option (lurcher) - Allow longer messages via SQLGetDiag (lurcher) - Add --enable-utf8ini flag and coding (lurcher) - Fix possible seg faults with SQLAPI and pooling (lurcher) - Fix possible seg faults with SQLAPI and pooling (lurcher) - Remove self-reference (Stefan) - Avoid implicit function declarations, for C99 compatibility (Florian Weimer) - Fix --enable-stats config error (lurcher) - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler) - isql.1: Add information about passwords containing semicolons (Hugh McMaster) - isql.1: Various text updates (Hugh McMaster) - Export __clear_ini_cache from libodbcinst (lurcher) - Revert "Add call to atexit to clear the ini cache" (lurcher) - Add call to atexit to clear the ini cache (lurcher) - Add extra iusql connectionstring syntax (lurcher) - Allow longer connection strings (part 3) (lurcher) - Allow longer connection strings (part 2) (lurcher) - Allow longer connection strings (lurcher) - Fixed Connection String (Stefan) - Add extra connection syntax to isql help (lurcher) - Add extra logging for ODBCINST connect settings (lurcher) - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher) - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher) - Allow passing complete connection string into iusql (lurcher) - Remove __get_connection from cursor lib (lurcher) - Avoid failed build if clock_gettime() is not available (lurcher) - Update change log (lurcher) - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel) - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine) - Fix iconv handle leak with pooling (lurcher) - Fix buffer overrun (lurcher) - Create SECURITY.md (Nick Gorham) - Move to 2.3.12pre (lurcher) - Makefile.am: Do not install config.h (Hugh McMaster) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Port to C99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - The resource leak fixes - Update to the upstream version 1.90.10 - Update to the upstream version 1.90.9 - Fix unstable OnBattery status - Update to the upstream version 1.90.8 - Update to 1.90.8 - README and HACKING were renamed to README.md and HACKING.md - Support zsh-completion - Resolve memory leak when connecting/disconnecting and refreshing the battery info. - test: Fix incorrect test script - Bump release for October 2024 mass rebuild: - Update to upstream version 1.90.6 - Update to the upstream version 1.90.6 - Include a fix patch for "incorrect external device battery update" issue. Link: https://gitlab.freedesktop.org/upower/upower/- /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe - Bump release for June 2024 mass rebuild - Add gating definition for RHEL-10 - RHEL-32340 Update to release 1.90.4 - The resource leak fixes - Update to the upstream version 1.90.10 - Update to the upstream version 1.90.9 - Fix unstable OnBattery status - Update to the upstream version 1.90.8 - Update to 1.90.8 - README and HACKING were renamed to README.md and HACKING.md - Support zsh-completion - Resolve memory leak when connecting/disconnecting and refreshing the battery info. - test: Fix incorrect test script - Bump release for October 2024 mass rebuild: - Update to upstream version 1.90.6 - Update to the upstream version 1.90.6 - Include a fix patch for "incorrect external device battery update" issue. Link: https://gitlab.freedesktop.org/upower/upower/- /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe - Bump release for June 2024 mass rebuild - Add gating definition for RHEL-10 - RHEL-32340 Update to release 1.90.4 - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Update to 0.5.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - FTBFS fix (rhbz#2171746) - Convert licence tag to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add licenses to fully conform to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Change the License tag to the SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Restore permission of the log directory Resolves: RHEL-92260 - Rebase to 1.1.4 - selinux: comply with with the "Unify bin and sbin" change Resolves: RHEL-113206 - Restore permissions of the log directory Resolves: RHEL-92260 - Install usbguard-tmpfles.conf Resolves: RHEL-78183 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Disable building for i686 - Update Requires list on selinux subpackage Resolves: RHEL-37322 - Rebase to 1.1.3 - Update usbguard-selinux subpackage - Include usbguard-notifier subpackage Resolves: RHEL-37322 - Disable logging to console - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Restore permission of the log directory Resolves: RHEL-92260 - Rebase to 1.1.4 - selinux: comply with with the "Unify bin and sbin" change Resolves: RHEL-113206 - Restore permissions of the log directory Resolves: RHEL-92260 - Install usbguard-tmpfles.conf Resolves: RHEL-78183 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Disable building for i686 - Update Requires list on selinux subpackage Resolves: RHEL-37322 - Rebase to 1.1.3 - Update usbguard-selinux subpackage - Include usbguard-notifier subpackage Resolves: RHEL-37322 - Disable logging to console - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Restore permission of the log directory Resolves: RHEL-92260 - Rebase to 1.1.4 - selinux: comply with with the "Unify bin and sbin" change Resolves: RHEL-113206 - Restore permissions of the log directory Resolves: RHEL-92260 - Install usbguard-tmpfles.conf Resolves: RHEL-78183 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Disable building for i686 - Update Requires list on selinux subpackage Resolves: RHEL-37322 - Rebase to 1.1.3 - Update usbguard-selinux subpackage - Include usbguard-notifier subpackage Resolves: RHEL-37322 - Disable logging to console - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Restore permission of the log directory Resolves: RHEL-92260 - Rebase to 1.1.4 - selinux: comply with with the "Unify bin and sbin" change Resolves: RHEL-113206 - Restore permissions of the log directory Resolves: RHEL-92260 - Install usbguard-tmpfles.conf Resolves: RHEL-78183 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Disable building for i686 - Update Requires list on selinux subpackage Resolves: RHEL-37322 - Rebase to 1.1.3 - Update usbguard-selinux subpackage - Include usbguard-notifier subpackage Resolves: RHEL-37322 - Disable logging to console - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Restore permission of the log directory Resolves: RHEL-92260 - Rebase to 1.1.4 - selinux: comply with with the "Unify bin and sbin" change Resolves: RHEL-113206 - Restore permissions of the log directory Resolves: RHEL-92260 - Install usbguard-tmpfles.conf Resolves: RHEL-78183 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Disable building for i686 - Update Requires list on selinux subpackage Resolves: RHEL-37322 - Rebase to 1.1.3 - Update usbguard-selinux subpackage - Include usbguard-notifier subpackage Resolves: RHEL-37322 - Disable logging to console - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrate to SPDX license - BR: perl-interpreter rather than perl - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use standard Fedora linker flags (bug #1548666) https://src.fedoraproject.org/rpms/uuid/pull-request/1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use standard Fedora linker flags (bug #1548666) https://src.fedoraproject.org/rpms/uuid/pull-request/1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Use standard Fedora linker flags (bug #1548666) https://src.fedoraproject.org/rpms/uuid/pull-request/1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Perl 5.38 rebuild - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - use sysuser setting for uuidd - Fix heap buffer overread in setpwnam() [CVE-2025-14104] - libfdisk: fix off-by-one in maximum last sector calculation - mount: improve --all documentation - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical - libblkid: use snprintf() instead of sprintf() - lscpu: Add NVIDIA Olympus arm64 core - libfdisk: improve collision reporting - libfdisk: (dos) ignore incomplete EBR for non-wholedisk - wall: always use utmp as fallback - lscpu: update table with ARM IDs - coresched: backport new tool to RHEL-10 - agetty: fix stdin conversion to tty name - blkid: allow up to 64k erofs block sizes - more(1): make sure we have data on stderr - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Clarify License of valgrind-scripts. - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Valgrind 3.25.1 final - Valgrind 3.25.0 final - More VALGRIND_3_24_BRANCH patches 0015-ppc-test_dfp2-build-fix-for-GCC-15.patch 0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch 0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch 0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Clarify License of valgrind-scripts. - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Valgrind 3.25.1 final - Valgrind 3.25.0 final - More VALGRIND_3_24_BRANCH patches 0015-ppc-test_dfp2-build-fix-for-GCC-15.patch 0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch 0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch 0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Clarify License of valgrind-scripts. - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Valgrind 3.25.1 final - Valgrind 3.25.0 final - More VALGRIND_3_24_BRANCH patches 0015-ppc-test_dfp2-build-fix-for-GCC-15.patch 0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch 0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch 0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Clarify License of valgrind-scripts. - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Valgrind 3.25.1 final - Valgrind 3.25.0 final - More VALGRIND_3_24_BRANCH patches 0015-ppc-test_dfp2-build-fix-for-GCC-15.patch 0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch 0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch 0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Clarify License of valgrind-scripts. - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Valgrind 3.25.1 final - Valgrind 3.25.0 final - More VALGRIND_3_24_BRANCH patches 0015-ppc-test_dfp2-build-fix-for-GCC-15.patch 0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch 0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch 0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Rebase to 8.0.11 for CVE-2026-56684 CVE-2026-63639 (CVE-2026-66373 in redis) - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Bump release for June 2024 mass rebuild - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Rebase to 8.0.11 for CVE-2026-56684 CVE-2026-63639 (CVE-2026-66373 in redis) - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Bump release for June 2024 mass rebuild - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Resolves: RHEL-121816 - Image mode: fix creation of /var files - Resolves: RHEL-45756 - Varnish consumes significantly more memory under RHEL8/9 - Resolves: RHEL-89691 - varnish: request smuggling attacks (CVE-2025-47905) - Resolves: RHEL-59267 - varnish rebase to 7.6.1 - Resolves: RHEL-59267 - varnish rebase to 7.6.0 - Resolves: RHEL-30333 CVE-2024-30156 varnish: HTTP/2 Broken Window Attack may result in denial of service - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release. A security release - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack - Resolves: RHEL-121816 - Image mode: fix creation of /var files - Resolves: RHEL-45756 - Varnish consumes significantly more memory under RHEL8/9 - Resolves: RHEL-89691 - varnish: request smuggling attacks (CVE-2025-47905) - Resolves: RHEL-59267 - varnish rebase to 7.6.1 - Resolves: RHEL-59267 - varnish rebase to 7.6.0 - Resolves: RHEL-30333 CVE-2024-30156 varnish: HTTP/2 Broken Window Attack may result in denial of service - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New upstream release. A security release - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack - Resolves: RHEL-59267 - varnish rebase to 7.6.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for varnish-7.4.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - New upstream release - Built for varnish-7.3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: - ci: Use tmt based test cases - Resolves:RHELMISC-3924 - adding gating configuration - Bump release for June 2024 mass rebuild - Update License field to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution during C omni-completion - RHEL-194059 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() - RHEL-191359 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192105 CVE-2026-57456 vim: possible code execution with python complete - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave() - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-44652 vim-9.1.083-1.el10: RHEL SAST Automation: address 4 High impact true positive(s) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215658 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-242467 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-241032 CVE-2026-73077 vim: arbitrary code execution via keyword lookup - RHEL-240373 CVE-2026-73078 vim: code injection in netrw via bookmarks - Resolves: RHEL-242103 CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution during C omni-completion - RHEL-271045 ex command injection via crafted filename in sign_jump() - RHEL-257016 CVE-2026-73073 arbitrary Ex command execution during C omni-completion - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215658 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-242467 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-241032 CVE-2026-73077 vim: arbitrary code execution via keyword lookup - RHEL-240373 CVE-2026-73078 vim: code injection in netrw via bookmarks - Resolves: RHEL-242103 CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-44652 vim-9.1.083-1.el10: RHEL SAST Automation: address 4 High impact true positive(s) - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave() - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution during C omni-completion - RHEL-194059 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() - RHEL-191359 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192105 CVE-2026-57456 vim: possible code execution with python complete - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave() - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-44652 vim-9.1.083-1.el10: RHEL SAST Automation: address 4 High impact true positive(s) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215658 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-242467 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-241032 CVE-2026-73077 vim: arbitrary code execution via keyword lookup - RHEL-240373 CVE-2026-73078 vim: code injection in netrw via bookmarks - Resolves: RHEL-242103 CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution during C omni-completion - RHEL-271045 ex command injection via crafted filename in sign_jump() - RHEL-257016 CVE-2026-73073 arbitrary Ex command execution during C omni-completion - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215658 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-242467 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-241032 CVE-2026-73077 vim: arbitrary code execution via keyword lookup - RHEL-240373 CVE-2026-73078 vim: code injection in netrw via bookmarks - Resolves: RHEL-242103 CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-44652 vim-9.1.083-1.el10: RHEL SAST Automation: address 4 High impact true positive(s) - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave() - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution during C omni-completion - RHEL-194059 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() - RHEL-191359 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192105 CVE-2026-57456 vim: possible code execution with python complete - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave() - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-44652 vim-9.1.083-1.el10: RHEL SAST Automation: address 4 High impact true positive(s) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215658 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-242467 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-241032 CVE-2026-73077 vim: arbitrary code execution via keyword lookup - RHEL-240373 CVE-2026-73078 vim: code injection in netrw via bookmarks - Resolves: RHEL-242103 CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution during C omni-completion - RHEL-271045 ex command injection via crafted filename in sign_jump() - RHEL-257016 CVE-2026-73073 arbitrary Ex command execution during C omni-completion - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215658 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-242467 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-241032 CVE-2026-73077 vim: arbitrary code execution via keyword lookup - RHEL-240373 CVE-2026-73078 vim: code injection in netrw via bookmarks - Resolves: RHEL-242103 CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-44652 vim-9.1.083-1.el10: RHEL SAST Automation: address 4 High impact true positive(s) - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave() - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - update to version v26.1 - add tmt config - backport patches - update to version v25.12 - update to version v25.11 - package import - virtinst: interface: add support for backend.hostname and backend.fqdn (RHEL-95370) - maint: use constants instead of strings for boot devices (RHEL-71842) - virtinst: rework get_boot_order (RHEL-71842) - virtinst: guest: introduce can_use_device_boot_order (RHEL-71842) - virtinst: remove legacy attribute from set_boot_order/get_boot_order (RHEL-71842) - installer: add support to use device boot order (RHEL-71842) - Rebased to virt-manager-5.1.0 (RHEL-119228) - The rebase also fixes the following bugs: RHEL-105818 - Rebased to virt-manager-5.0.0 (RHEL-46783) - The rebase also fixes the following bugs: RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371 RHEL-65189, RHEL-66768 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - cloner: Sync <uuid> and <sysinfo> system uuid (RHEL-34608) - virtinstall: fix regression with --boot and no install method (RHEL-34608) - progress: Fix showing correct final total (RHEL-34608) - virtinstall: Fix the allocating disk size printed by the progress bar (RHEL-34608) - virtinstall: Hide total_size in the progress bar if it doesn't need (RHEL-34608) - virt-install: Recommend '--boot uefi' (RHEL-34608) - virt-install: Document Secure Boot setups (RHEL-34608) - tests: Add more cloud-init and TPM test cases (RHEL-34608) - installer: drop default TPM for --cloud-init install phase (RHEL-34608) - Add gating for centos stream 10 (RHEL-34608) - xmleditor: make gtksourceview optional (RHEL-35859) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - virtinst: interface: add support for backend.hostname and backend.fqdn (RHEL-95370) - maint: use constants instead of strings for boot devices (RHEL-71842) - virtinst: rework get_boot_order (RHEL-71842) - virtinst: guest: introduce can_use_device_boot_order (RHEL-71842) - virtinst: remove legacy attribute from set_boot_order/get_boot_order (RHEL-71842) - installer: add support to use device boot order (RHEL-71842) - Rebased to virt-manager-5.1.0 (RHEL-119228) - The rebase also fixes the following bugs: RHEL-105818 - Rebased to virt-manager-5.0.0 (RHEL-46783) - The rebase also fixes the following bugs: RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371 RHEL-65189, RHEL-66768 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - cloner: Sync <uuid> and <sysinfo> system uuid (RHEL-34608) - virtinstall: fix regression with --boot and no install method (RHEL-34608) - progress: Fix showing correct final total (RHEL-34608) - virtinstall: Fix the allocating disk size printed by the progress bar (RHEL-34608) - virtinstall: Hide total_size in the progress bar if it doesn't need (RHEL-34608) - virt-install: Recommend '--boot uefi' (RHEL-34608) - virt-install: Document Secure Boot setups (RHEL-34608) - tests: Add more cloud-init and TPM test cases (RHEL-34608) - installer: drop default TPM for --cloud-init install phase (RHEL-34608) - Add gating for centos stream 10 (RHEL-34608) - xmleditor: make gtksourceview optional (RHEL-35859) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - remove -tests sub-rpm - switch testing to tmt - update to version 25.12 - update to version 25.10 - update to version 25.9 - update to bugfix release 25.7.3 - update to bugfix release 25.7.2 - update to 25.7, switch to pyproject rpm macros - rebase to version 25.4.1 - specfile: do not use %{_libdir} - Enable SPICE on AlmaLinux - Rebase to 1.1.2 - Remove patches which are upstream. resolves: RHEL-81737 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - OCaml 5.2.0 for Fedora 41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - OCaml 5.1.1 + s390x code gen fix for Fedora 40 - OCaml 5.1.1 rebuild for Fedora 40 - Fix build issue with libxml2 2.12.1 - Stop using maxmem (xfs_repair -m option) resolves: RHEL-169321 - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Add --no-fstrim option resolves: RHEL-164583 - Create sentinel file after all firstboot scripts have finished running resolves: RHEL-161192 - Requires openssl (for finding thumbprint) resolves: RHEL-155204 - Attempt 2 to fix sles12sp5 crypttab resolves: RHEL-93583 - Install blnsvr.exe to \Windows\Drivers\VirtIO resolves: RHEL-148423 - Rebase to virt-v2v 2.10.0 resolves: RHEL-111241 - Synchronize spec file with Fedora. - Tighten permissions on windows C:\Program Files\Guestfs resolves: RHEL-104352 - Don't output floppy XML with qemu lacks support resolves: RHEL-90175 - convert: linux: Ignore /etc/lvm/archive/*.vg files resolves: RHEL-113820 - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor resolves: RHEL-112517 - Fix for setting boot order for Linux guests based on grub location resolves: RHEL-115989, RHEL-115990 - Remove virt-v2v subscription manager options resolves: RHEL-122308 - Handle subdirectories in nbdkit vddk export wildcard resolves: RHEL-121728 - Further fixes for nbdkit vddk export wildcard resolves: RHEL-122753 - Fix ESP conversion if C:\Windows\Temp has alternate case resolves: RHEL-124569 - setfiles runs out of memory in glibc fts_read (doc fix) resolves: RHEL-125116 - Use AV and GPO information from inspection instead of open coding resolves: RHEL-125956 - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000 resolves: RHEL-135617 - Hard depend on libnbd 1.24 resolves: RHEL-140894 - Add documentation about BitLocker Recovery resolves: RHEL-103915 - Fix regression when converting vmx+ssh with snapshots resolves: RHEL-102938 - Expose XFS version in virt-v2v-inspector resolves: RHEL-144075 - Fix Debian 12 UEFI conversions resolves: RHEL-144467 - Fix import when datastore name has characters like '+' resolves: RHEL-133729 - Replace /etc/crypttab /dev/sdX with UUID resolves: RHEL-93583 - Replace '/' in output name with '_' resolves: RHEL-136479 - Rebase to virt-v2v 2.8.1 related: RHEL-81735 - Fix virt-v2v -v --install dnf5 error resolves: RHEL-83288 - Print blkhash of converted image in virt-v2v debugging output resolves: RHEL-85514 - Document dracut network-legacy conversion failure resolves: RHEL-55732 - Print nbdcopy command in debug output resolves: RHEL-86088 - Remove usage of nbdkit-cacheextents-filter resolves: RHEL-88860 - Print better mountpoint stats in debug output resolves: RHEL-88862 - Remove several ancient, deprecated options resolves: RHEL-88867 - virt-v2v-inspector is failing on snapshots of running VMs resolves: RHEL-88544 - Add virt-v2v-open tool resolves: RHEL-89993 - Run filesystem check before and after conversion resolves: RHEL-91931 - virt-v2v fails to convert XFS guest with dirty filesystem resolves: RHEL-95365 - virt-v2v fails to convert guests with e2fsck errors resolves: RHEL-97600 - Improve layout of man page resolves: RHEL-99745 - Fix xfs_repair out of memory error resolves: RHEL-99313 - Remove virt-v2v -io vddk-noextents=true option resolves: RHEL-102619 - Add -o kubevirt -oo disk and -oo create options resolves: RHEL-101599 - Fix escaping of nbdkit-vddk-plugin export parameter resolves: RHEL-102734 - Fix installation of drivers on firstboot with pending reboots resolves: RHEL-103356 - Log the version of libnbd / nbdcopy in virt-v2v output resolves: RHEL-104018 - Fix SELinux relabelling in Linux split-/usr resolves: RHEL-109130 - Set boot order for Linux guests based on grub location resolves: RHEL-108991 - Rebase to virt-v2v 2.7.1 resolves: RHEL-56814 - Replace Jansson with json-c resolves: RHEL-65297 - Find drivers for win2025 guests resolves: RHEL-65009 - in-place: Add new -O option to write inspector XML resolves: RHEL-70538 - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper resolves: RHEL-78505 - convert: Use yum/apt/... for package removals resolves: RHEL-78657 - convert: windows: Online all virtio disks at first boot resolves: RHEL-56318 - Update to virt-v2v-2.10.0-17 - mlcustomize firstboot: be more careful about quoting and create a sentinel file when firstboot completes - Add --no-fstrim option to disable fstrim during conversion - convert: stop using maxmem (xfs_repair -m option) - mldrivers/firmware.ml: ignore CHS geometry error from parted (Veritas/Sun partitions) - docs: show input parameters for -i input methods - docs: -i disk allows multiple disk images - -i disk: allow nbd:// URIs for input disks - Fix binary LUKS keys (read_whole_file, text: and base64: key prefixes) - Windows firstboot: add exit code 250 to skip reboots - smp: use cgroup CPU limits for appliance SMP - Fix location of Windows Vista and Windows 2008 Server R1 drivers - Require libguestfs >= 1:1.58.1-6 (text:/base64 LUKS prefixes) - Attempt 2 to fix sles12sp5 crypttab resolves: RHEL-93583 - Install blnsvr.exe to \Windows\Drivers\VirtIO resolves: RHEL-148423 - Rebase to virt-v2v 2.10.0 resolves: RHEL-111241 - Synchronize spec file with Fedora. - Tighten permissions on windows C:\Program Files\Guestfs resolves: RHEL-104352 - Don't output floppy XML with qemu lacks support resolves: RHEL-90175 - convert: linux: Ignore /etc/lvm/archive/*.vg files resolves: RHEL-113820 - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor resolves: RHEL-112517 - Fix for setting boot order for Linux guests based on grub location resolves: RHEL-115989, RHEL-115990 - Remove virt-v2v subscription manager options resolves: RHEL-122308 - Handle subdirectories in nbdkit vddk export wildcard resolves: RHEL-121728 - Further fixes for nbdkit vddk export wildcard resolves: RHEL-122753 - Fix ESP conversion if C:\Windows\Temp has alternate case resolves: RHEL-124569 - setfiles runs out of memory in glibc fts_read (doc fix) resolves: RHEL-125116 - Use AV and GPO information from inspection instead of open coding resolves: RHEL-125956 - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000 resolves: RHEL-135617 - Hard depend on libnbd 1.24 resolves: RHEL-140894 - Add documentation about BitLocker Recovery resolves: RHEL-103915 - Fix regression when converting vmx+ssh with snapshots resolves: RHEL-102938 - Expose XFS version in virt-v2v-inspector resolves: RHEL-144075 - Fix Debian 12 UEFI conversions resolves: RHEL-144467 - Fix import when datastore name has characters like '+' resolves: RHEL-133729 - Replace /etc/crypttab /dev/sdX with UUID resolves: RHEL-93583 - Replace '/' in output name with '_' resolves: RHEL-136479 - Rebase to virt-v2v 2.8.1 related: RHEL-81735 - Fix virt-v2v -v --install dnf5 error resolves: RHEL-83288 - Print blkhash of converted image in virt-v2v debugging output resolves: RHEL-85514 - Document dracut network-legacy conversion failure resolves: RHEL-55732 - Print nbdcopy command in debug output resolves: RHEL-86088 - Remove usage of nbdkit-cacheextents-filter resolves: RHEL-88860 - Print better mountpoint stats in debug output resolves: RHEL-88862 - Remove several ancient, deprecated options resolves: RHEL-88867 - virt-v2v-inspector is failing on snapshots of running VMs resolves: RHEL-88544 - Add virt-v2v-open tool resolves: RHEL-89993 - Run filesystem check before and after conversion resolves: RHEL-91931 - virt-v2v fails to convert XFS guest with dirty filesystem resolves: RHEL-95365 - virt-v2v fails to convert guests with e2fsck errors resolves: RHEL-97600 - Improve layout of man page resolves: RHEL-99745 - Fix xfs_repair out of memory error resolves: RHEL-99313 - Remove virt-v2v -io vddk-noextents=true option resolves: RHEL-102619 - Add -o kubevirt -oo disk and -oo create options resolves: RHEL-101599 - Fix escaping of nbdkit-vddk-plugin export parameter resolves: RHEL-102734 - Fix installation of drivers on firstboot with pending reboots resolves: RHEL-103356 - Log the version of libnbd / nbdcopy in virt-v2v output resolves: RHEL-104018 - Fix SELinux relabelling in Linux split-/usr resolves: RHEL-109130 - Set boot order for Linux guests based on grub location resolves: RHEL-108991 - Rebase to virt-v2v 2.7.1 resolves: RHEL-56814 - Replace Jansson with json-c resolves: RHEL-65297 - Find drivers for win2025 guests resolves: RHEL-65009 - in-place: Add new -O option to write inspector XML resolves: RHEL-70538 - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper resolves: RHEL-78505 - convert: Use yum/apt/... for package removals resolves: RHEL-78657 - convert: windows: Online all virtio disks at first boot resolves: RHEL-56318 - Further fixes for QEMU Guest Agent install & VMware Tools removal resolves: RHEL-50563 - Fix installation of QEMU Guest Agent resolves: RHEL-50563 - New upstream development version 2.5.5 resolves: RHEL-46869 - Add <disk> <boot-order>#</boot-order> to XML output resolves: RHEL-193138 - Add new --collect option to collect pre-conversion information resolves: RHEL-192947 - Retry qemu-ga installer on failure resolves: RHEL-193139 - Fix conversions of encrypted Ubuntu guests (second attempt) resolves: RHEL-192921 - Skip fsck after conversion for RHEL 7 resolves: RHEL-192948 - Drop 'Fix conversion of encrypted Ubuntu guests' (failed testing) related: RHEL-174515 - Fix location of Windows Vista and Windows 2008 Server R1 drivers resolves: RHEL-174513 - Fix binary LUKS keys resolves: RHEL-174520 - Windows firstboot: Add exit code 250 to skip reboots Rework documentation for firstboot feature resolves: RHEL-174516 - Use cgroups in SMP calculation resolves: RHEL-174512 - Stop using maxmem (xfs_repair -m option) resolves: RHEL-169321 - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Add --no-fstrim option resolves: RHEL-164583 - Create sentinel file after all firstboot scripts have finished running resolves: RHEL-161192 - Requires openssl (for finding thumbprint) resolves: RHEL-155204 - Attempt 2 to fix sles12sp5 crypttab resolves: RHEL-93583 - Install blnsvr.exe to \Windows\Drivers\VirtIO resolves: RHEL-148423 - Rebase to virt-v2v 2.10.0 resolves: RHEL-111241 - Synchronize spec file with Fedora. - Tighten permissions on windows C:\Program Files\Guestfs resolves: RHEL-104352 - Don't output floppy XML with qemu lacks support resolves: RHEL-90175 - convert: linux: Ignore /etc/lvm/archive/*.vg files resolves: RHEL-113820 - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor resolves: RHEL-112517 - Fix for setting boot order for Linux guests based on grub location resolves: RHEL-115989, RHEL-115990 - Remove virt-v2v subscription manager options resolves: RHEL-122308 - Handle subdirectories in nbdkit vddk export wildcard resolves: RHEL-121728 - Further fixes for nbdkit vddk export wildcard resolves: RHEL-122753 - Fix ESP conversion if C:\Windows\Temp has alternate case resolves: RHEL-124569 - setfiles runs out of memory in glibc fts_read (doc fix) resolves: RHEL-125116 - Use AV and GPO information from inspection instead of open coding resolves: RHEL-125956 - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000 resolves: RHEL-135617 - Hard depend on libnbd 1.24 resolves: RHEL-140894 - Add documentation about BitLocker Recovery resolves: RHEL-103915 - Fix regression when converting vmx+ssh with snapshots resolves: RHEL-102938 - Expose XFS version in virt-v2v-inspector resolves: RHEL-144075 - Fix Debian 12 UEFI conversions resolves: RHEL-144467 - Fix import when datastore name has characters like '+' resolves: RHEL-133729 - Replace /etc/crypttab /dev/sdX with UUID resolves: RHEL-93583 - Replace '/' in output name with '_' resolves: RHEL-136479 - Fix SELinux relabelling of podman rootless containers resolves: RHEL-239852 - Add --selinux-relabel-exclude parameter resolves: RHEL-239809 - Add --selinux-relabel-at-boot parameter resolves: RHEL-RHEL-240649 - Change '::' to 'REM' in Windows batch files for improved reliability resolves: RHEL-239810 - Add <disk> <boot-order>#</boot-order> to XML output resolves: RHEL-193138 - Add new --collect option to collect pre-conversion information resolves: RHEL-192947 - Retry qemu-ga installer on failure resolves: RHEL-193139 - Fix conversions of encrypted Ubuntu guests (second attempt) resolves: RHEL-192921 - Skip fsck after conversion for RHEL 7 resolves: RHEL-192948 - Drop 'Fix conversion of encrypted Ubuntu guests' (failed testing) related: RHEL-174515 - Fix location of Windows Vista and Windows 2008 Server R1 drivers resolves: RHEL-174513 - Fix binary LUKS keys resolves: RHEL-174520 - Windows firstboot: Add exit code 250 to skip reboots Rework documentation for firstboot feature resolves: RHEL-174516 - Use cgroups in SMP calculation resolves: RHEL-174512 - Stop using maxmem (xfs_repair -m option) resolves: RHEL-169321 - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Add --no-fstrim option resolves: RHEL-164583 - Create sentinel file after all firstboot scripts have finished running resolves: RHEL-161192 - Requires openssl (for finding thumbprint) resolves: RHEL-155204 - Attempt 2 to fix sles12sp5 crypttab resolves: RHEL-93583 - Install blnsvr.exe to \Windows\Drivers\VirtIO resolves: RHEL-148423 - Add -it nfc support resolves: RHEL-248249 - Increase timeout resolves: RHEL-252892 - Fix SELinux relabelling of podman rootless containers resolves: RHEL-239852 - Add --selinux-relabel-exclude parameter resolves: RHEL-239809 - Add --selinux-relabel-at-boot parameter resolves: RHEL-RHEL-240649 - Change '::' to 'REM' in Windows batch files for improved reliability resolves: RHEL-239810 - Add <disk> <boot-order>#</boot-order> to XML output resolves: RHEL-193138 - Add new --collect option to collect pre-conversion information resolves: RHEL-192947 - Retry qemu-ga installer on failure resolves: RHEL-193139 - Fix conversions of encrypted Ubuntu guests (second attempt) resolves: RHEL-192921 - Skip fsck after conversion for RHEL 7 resolves: RHEL-192948 - Drop 'Fix conversion of encrypted Ubuntu guests' (failed testing) related: RHEL-174515 - Fix location of Windows Vista and Windows 2008 Server R1 drivers resolves: RHEL-174513 - Fix binary LUKS keys resolves: RHEL-174520 - Windows firstboot: Add exit code 250 to skip reboots Rework documentation for firstboot feature resolves: RHEL-174516 - Use cgroups in SMP calculation resolves: RHEL-174512 - Stop using maxmem (xfs_repair -m option) resolves: RHEL-169321 - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Add --no-fstrim option resolves: RHEL-164583 - Create sentinel file after all firstboot scripts have finished running resolves: RHEL-161192 - Requires openssl (for finding thumbprint) resolves: RHEL-155204 - Attempt 2 to fix sles12sp5 crypttab resolves: RHEL-93583 - Allow NBD connections from remote hosts in -i libvirtxml input mode resolves: RHEL-267140 - For Linux conversions use yum/dnf clean_requirements_on_remove=False resolves: RHEL-257319 - Add -it nfc support resolves: RHEL-248249 - Increase timeout resolves: RHEL-252892 - Fix SELinux relabelling of podman rootless containers resolves: RHEL-239852 - Add --selinux-relabel-exclude parameter resolves: RHEL-239809 - Add --selinux-relabel-at-boot parameter resolves: RHEL-RHEL-240649 - Change '::' to 'REM' in Windows batch files for improved reliability resolves: RHEL-239810 - Add <disk> <boot-order>#</boot-order> to XML output resolves: RHEL-193138 - Add new --collect option to collect pre-conversion information resolves: RHEL-192947 - Retry qemu-ga installer on failure resolves: RHEL-193139 - Fix conversions of encrypted Ubuntu guests (second attempt) resolves: RHEL-192921 - Skip fsck after conversion for RHEL 7 resolves: RHEL-192948 - Drop 'Fix conversion of encrypted Ubuntu guests' (failed testing) related: RHEL-174515 - Fix location of Windows Vista and Windows 2008 Server R1 drivers resolves: RHEL-174513 - Fix binary LUKS keys resolves: RHEL-174520 - Windows firstboot: Add exit code 250 to skip reboots Rework documentation for firstboot feature resolves: RHEL-174516 - Use cgroups in SMP calculation resolves: RHEL-174512 - Stop using maxmem (xfs_repair -m option) resolves: RHEL-169321 - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Add --no-fstrim option resolves: RHEL-164583 - Create sentinel file after all firstboot scripts have finished running resolves: RHEL-161192 - -i libvirtxml: Add -io nbd-tls-certificates for NBD disks resolves: RHEL-276238 - Allow NBD connections from remote hosts in -i libvirtxml input mode resolves: RHEL-267140 - For Linux conversions use yum/dnf clean_requirements_on_remove=False resolves: RHEL-257319 - Add -it nfc support resolves: RHEL-248249 - Increase timeout resolves: RHEL-252892 - Fix SELinux relabelling of podman rootless containers resolves: RHEL-239852 - Add --selinux-relabel-exclude parameter resolves: RHEL-239809 - Add --selinux-relabel-at-boot parameter resolves: RHEL-RHEL-240649 - Change '::' to 'REM' in Windows batch files for improved reliability resolves: RHEL-239810 - Add <disk> <boot-order>#</boot-order> to XML output resolves: RHEL-193138 - Add new --collect option to collect pre-conversion information resolves: RHEL-192947 - Retry qemu-ga installer on failure resolves: RHEL-193139 - Fix conversions of encrypted Ubuntu guests (second attempt) resolves: RHEL-192921 - Skip fsck after conversion for RHEL 7 resolves: RHEL-192948 - Drop 'Fix conversion of encrypted Ubuntu guests' (failed testing) related: RHEL-174515 - Fix location of Windows Vista and Windows 2008 Server R1 drivers resolves: RHEL-174513 - Fix binary LUKS keys resolves: RHEL-174520 - Windows firstboot: Add exit code 250 to skip reboots Rework documentation for firstboot feature resolves: RHEL-174516 - Use cgroups in SMP calculation resolves: RHEL-174512 - Stop using maxmem (xfs_repair -m option) resolves: RHEL-169321 - Fix CHS geometry error for Veritas/Sun partitions resolves: RHEL-169225 - Add --no-fstrim option resolves: RHEL-164583 - Enable SPICE on AlmaLinux - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Enable building for ppc64le - Fix binary LUKS keys resolves: RHEL-174518 - Windows firstboot: Add exit code 250 to skip reboots Rework documentation for firstboot feature resolves: RHEL-174517 - Write sentinel file after firstboot scripts finish related: RHEL-161192 - Fix location of Windows Vista and Windows 2008 Server R1 drivers related: RHEL-174513 - Synchronize spec file with Fedora - Fix pnputils after virt-customize --inject-virtio-win resolves: RHEL-116537 - Unify spec files between Fedora and RHEL. - Ensure a minimum version of libguestfs is installed at build and run time. resolves: RHEL-116716 - Remove virt-customize subscription-manager options resolves: RHEL-122307 - Add AV and GPOs to virt-inspector output resolves: RHEL-125955 - Expose XFS version in virt-filesystems resolves: RHEL-144074 - Rebase to guestfs-tools 1.54.0 resolves: RHEL-81734 - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error resolves: RHEL-83201 - virt-drivers fails on opensuse guest if kernel-source is installed resolves: RHEL-92604 - builder: Update link to templates to use https resolves: RHEL-94873 - Fix SELinux relabelling in Linux split-/usr resolves: RHEL-109129 - Rebase to guestfs-tools 1.52.2 resolves: RHEL-56812 - Replace Jansson with json-c resolves: RHEL-65295 - New stable version 1.52.1 - Rebase on top of patches from RHEL 9.5 - Reboot Windows between each firstboot script to improve reliability resolves: RHEL-56319 - customize: Implement --inject-blnsvr operation resolves: RHEL-56330 - Add support for nbd+unix:// URIs resolves: RHEL-56332 - Enable building for ppc64le - Drop setfiles -F flag resolves: RHEL-260203 - Fix binary LUKS keys resolves: RHEL-174518 - Windows firstboot: Add exit code 250 to skip reboots Rework documentation for firstboot feature resolves: RHEL-174517 - Write sentinel file after firstboot scripts finish related: RHEL-161192 - Fix location of Windows Vista and Windows 2008 Server R1 drivers related: RHEL-174513 - Synchronize spec file with Fedora - Fix pnputils after virt-customize --inject-virtio-win resolves: RHEL-116537 - Unify spec files between Fedora and RHEL. - Ensure a minimum version of libguestfs is installed at build and run time. resolves: RHEL-116716 - Remove virt-customize subscription-manager options resolves: RHEL-122307 - Add AV and GPOs to virt-inspector output resolves: RHEL-125955 - Expose XFS version in virt-filesystems resolves: RHEL-144074 - Rebase to guestfs-tools 1.54.0 resolves: RHEL-81734 - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error resolves: RHEL-83201 - virt-drivers fails on opensuse guest if kernel-source is installed resolves: RHEL-92604 - builder: Update link to templates to use https resolves: RHEL-94873 - Fix SELinux relabelling in Linux split-/usr resolves: RHEL-109129 - Rebase to guestfs-tools 1.52.2 resolves: RHEL-56812 - Replace Jansson with json-c resolves: RHEL-65295 - Enable building for ppc64le - Synchronize spec file with Fedora - Fix pnputils after virt-customize --inject-virtio-win resolves: RHEL-116537 - Unify spec files between Fedora and RHEL. - Ensure a minimum version of libguestfs is installed at build and run time. resolves: RHEL-116716 - Remove virt-customize subscription-manager options resolves: RHEL-122307 - Add AV and GPOs to virt-inspector output resolves: RHEL-125955 - Expose XFS version in virt-filesystems resolves: RHEL-144074 - Rebase to guestfs-tools 1.54.0 resolves: RHEL-81734 - virt-builder, virt-v2v & other tools with -v and --install causes dnf5 error resolves: RHEL-83201 - virt-drivers fails on opensuse guest if kernel-source is installed resolves: RHEL-92604 - builder: Update link to templates to use https resolves: RHEL-94873 - Fix SELinux relabelling in Linux split-/usr resolves: RHEL-109129 - Rebase to guestfs-tools 1.52.2 resolves: RHEL-56812 - Replace Jansson with json-c resolves: RHEL-65295 - New stable version 1.52.1 - Rebase on top of patches from RHEL 9.5 - Reboot Windows between each firstboot script to improve reliability resolves: RHEL-56319 - customize: Implement --inject-blnsvr operation resolves: RHEL-56330 - Add support for nbd+unix:// URIs resolves: RHEL-56332 - Bump release for June 2024 mass rebuild - OCaml 5.2.0 ppc64le fix - Rebuild for OCaml 5.2 - Enable build on ppc64le - Rebase to 1.13.3 [RHEL-133034] - Resolves: RHEL-133034 (Rebase virtiofsd to latest version for RHEL 10.2) - Rebase to 1.13.2 [RHEL-97010] - Resolves: RHEL-97010 (Rebase virtiofsd to latest version for RHEL 9.6.z) - Rebase to 1.13.0 [RHEL-69290] - Resolves: RHEL-69290 (Rebase virtiofsd to latest version for RHEL 10.0) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to upstream version 1.11.1 [RHEL-48645] - Resolves: RHEL-48645 (Rebase virtiofsd to latest version for RHEL 10.0 Beta) - Bump release for June 2024 mass rebuild - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to version 1.10.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Migrate license tag to SPDX - make getting password from backed up secret FIPS compatible (RHEL-146218) - use sequoia instead of gpgme (RHEL-56368) - Make volume_key FIPS compliant Resolves: RHEL-74047 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - make getting password from backed up secret FIPS compatible (RHEL-146218) - use sequoia instead of gpgme (RHEL-56368) - Make volume_key FIPS compliant Resolves: RHEL-74047 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Fix CVE-2025-14242 - Resolves: RHEL-134159 - Add a tmpfiles.d config. Resolves: RHEL-133067 - Fix cryptographic agility issues Resolves: RHEL-99533 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix FEAT command to list AUTH TLS when TLSv1.3 is enabled - Resolves: RHEL-54726 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.78.6 - Bump to 0.78.5 - Update to 0.78.4 - Update to VTE 0.78.1 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Only use bsymbolic on x86_64 - Backport changes from Fedora 40 - Backport changes from Fedora 40 - Update to 0.78.6 - Bump to 0.78.5 - Update to 0.78.4 - Update to VTE 0.78.1 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Only use bsymbolic on x86_64 - Backport changes from Fedora 40 - Backport changes from Fedora 40 - Update to 0.78.6 - Bump to 0.78.5 - Update to 0.78.4 - Update to VTE 0.78.1 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Only use bsymbolic on x86_64 - Backport changes from Fedora 40 - Backport changes from Fedora 40 - Update to 1.4.328.1 SDK - Update to v1.4.313 - Rebuild for the correct RHEL 10 target - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Update to 1.3.283.0 SDK - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.4.328.1 SDK - CI test - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Fix the annocheck 'hardened' test in aarch64 - Update to 1.3.283.0 SDK - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.4.328.1 SDK - CI test - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Fix the annocheck 'hardened' test in aarch64 - Update to 1.3.283.0 SDK - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.4.328.1 SDK - Update to SDK v1.4.313 - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Update to 1.3.283.0 SDK - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.4.328.1 SDK - Update to SDK v1.4.313.0 - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Update to 1.3.283.0 SDK - Remove dependency to vulkan-utility-libraries-devel - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.4.328.1 SDK - Update to SDK v1.4.313 - Update to 1.4.304.0 SDK - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Update to 1.3.283.0 SDK - Make vulkan-volk-devel conflict with volk-devel - vulkan-volk v1.3.268.0 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating.yaml file - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX license format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Disable ASM code parts - Resolves: RHEL-46283 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add licenses to fully conform to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Change the License tag to the SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebase to 5.6.0 - Resolves: rhbz#2148994 - Rebase to 1.24.0 Resolves: RHEL-107614 - Update to 1.23.1 Resolves: RHEL-86834 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.23.0 (RHEL-45197) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.45 Resolves: RHEL-96927 - Update to 1.44 Resolves: RHEL-88662 - Update to 1.43 Resolves: RHEL-86806 - Update to 1.41 Resolves: RHEL-79795 - Update to 1.40 Resolves: RHEL-78561 - Align with Fedora spec file to fix build failure. Resolves: RHEL-72786 - Update to 1.39 Resolves: RHEL-72786 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update to 1.37 Resolves: RHEL-56915 - Bump release for June 2024 mass rebuild - wayland-utils 1.3.0 Resolves: RHEL-130858 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Enable video support for non-RHEL (#2241572) - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 0.8.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.8.4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Install abseil-cpp headers as well - Resolves: RHEL-28928 - Build abseil-cpp from tarbal - Resolves: RHEL-28928 - Bump release for June 2024 mass rebuild - 1.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - New release: 35.11 (bcl) - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot]) - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot]) - CI: Update terraform hash (bcl) - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot]) - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot]) - docs: fix typo/formatting in HACKING.md (idiez) - Add release creation documentation (bcl) - Revert back to using GnuTLS as the TLS backend - Use bundled implementation of MD4 for NTLM Resolves: RHEL-69748 - wget cannot open pkcs11 uri - Resolves: RHEL-59862 - Avoid direct usage of nettle functions - Resolves: RHEL-61131 - Missing BuildRequries to nettle-devel - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-43226 - Misinterpretation of input may lead to improper behavior - Resolves: RHEL-220498 - async unsafe code in signal handler context - Fix CVE-2026-58471: buffer overflow in convert_fname() Resolves: RHEL-194518 - Fix integer and buffer overflow in html_quote_string() Resolves: RHEL-210625 - Revert back to using GnuTLS as the TLS backend - Use bundled implementation of MD4 for NTLM Resolves: RHEL-69748 - wget cannot open pkcs11 uri - Resolves: RHEL-59862 - Avoid direct usage of nettle functions - Resolves: RHEL-61131 - Missing BuildRequries to nettle-devel - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - update plans - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fixup! Update to 5.5.20 (#2242798) - Update to 5.5.20 (#2242798) - Update to 5.5.18 (#2224795) - Use self-contained gnupg home for source verification (#2225463) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Change License tag to SPDX format - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - update plans - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - fixup! Update to 5.5.20 (#2242798) - Update to 5.5.20 (#2242798) - Update to 5.5.18 (#2224795) - Use self-contained gnupg home for source verification (#2225463) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Change License tag to SPDX format - Bump to new release (RHEL-116973) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Add gating test - wireplumber 0.5.10 Resolves: DESKTOP-1859 - wireplumber 0.5.8 Resolves: RHEL-72787 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - wireplumber 0.5.5 - wireplumber 0.5.4 - wireplumber 0.5.3 - wireplumber 0.5.2 - Backport support for loading external WpConf from disk - wireplumber 0.5.1 - Backport MR #620 to fix issues with bluetooth headsets etc. - Resolves: rhbz#2269343 - wireplumber 0.5.10 Resolves: DESKTOP-1859 - wireplumber 0.5.8 Resolves: RHEL-72787 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - wireplumber 0.5.5 - wireplumber 0.5.4 - wireplumber 0.5.3 - wireplumber 0.5.2 - Backport support for loading external WpConf from disk - wireplumber 0.5.1 - Backport MR #620 to fix issues with bluetooth headsets etc. - Resolves: rhbz#2269343 - Fix Heap-based Buffer Overflow in Wireshark (CVE-2026-95389) - Resolves: RHEL-272823 - Fix DoS via heap-based buffer overflow in SPDY dissector (CVE-2026-95387) - Resolves: RHEL-272323 - Fix DoS via X.509IF protocol dissector crash (CVE-2026-76928) - Resolves: RHEL-248365 - Fix DoS vulnerability in H.245 protocol dissector (CVE-2026-76927) - Resolves: RHEL-257643 - Fix DoS vulnerability in ESS protocol dissector (CVE-2026-76919) - Resolves: RHEL-257617 - Fix DoS via C12.22 protocol dissector crash (CVE-2026-76886) - Resolves: RHEL-247382 - Fix DoS via RRC protocol dissector out-of-bounds write (CVE-2026-76880) - Resolves: RHEL-245610 - Fix DoS via C12.22 protocol dissector crash (CVE-2026-76879) - Resolves: RHEL-248209 - Resolves: RHEL-173221 - CVE-2026-5656 Improper Limitation of a Pathname to a Restricted Directory - Resolves: RHEL-173218 - CVE-2026-5405 Heap-based Buffer Overflow - Resolves: RHEL-173221 - CVE-2026-5656 Improper Limitation of a Pathname to a Restricted Directory - Resolves: RHEL-173218 - CVE-2026-5405 Heap-based Buffer Overflow - Resolves: RHEL-152922 - CVE-2026-3203 Buffer Over-read - Resolves: RHEL-152913 - CVE-2026-3201 Improperly Controlled Sequential Memory Allocation - Resolves: RHEL-136919 - NULL Pointer Dereference in Wireshark (CVE-2025-9817) - Resolves: RHEL-130427 - Access of Uninitialized Pointer in Wireshark - Resolves: RHEL-91194 - RFE - Wireshark with LUA support - Resolves: RHEL-80274 - Increasing NVR due to a build error - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2 - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark - Resolves: RHEL-68452 - Buffer Over-read in Wireshark - Resolves: RHEL-152921 - CVE-2026-3203 Buffer Over-read - Resolves: RHEL-152912 - CVE-2026-3201 Improperly Controlled Sequential Memory Allocation - Resolves: RHEL-136916 - NULL Pointer Dereference in Wireshark (CVE-2025-9817) - Resolves: RHEL-130425 - Access of Uninitialized Pointer in Wireshark - Resolves: RHEL-91194 - RFE - Wireshark with LUA support - Resolves: RHEL-80274 - Increasing NVR due to a build error - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2 - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark - Resolves: RHEL-68452 - Buffer Over-read in Wireshark - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-62013 - Improper Handling of Missing Values in Wireshark - Fix Heap-based Buffer Overflow in Wireshark (CVE-2026-95389) - Resolves: RHEL-272823 - Fix DoS via heap-based buffer overflow in SPDY dissector (CVE-2026-95387) - Resolves: RHEL-272323 - Fix DoS via X.509IF protocol dissector crash (CVE-2026-76928) - Resolves: RHEL-248365 - Fix DoS vulnerability in H.245 protocol dissector (CVE-2026-76927) - Resolves: RHEL-257643 - Fix DoS vulnerability in ESS protocol dissector (CVE-2026-76919) - Resolves: RHEL-257617 - Fix DoS via C12.22 protocol dissector crash (CVE-2026-76886) - Resolves: RHEL-247382 - Fix DoS via RRC protocol dissector out-of-bounds write (CVE-2026-76880) - Resolves: RHEL-245610 - Fix DoS via C12.22 protocol dissector crash (CVE-2026-76879) - Resolves: RHEL-248209 - Resolves: RHEL-173221 - CVE-2026-5656 Improper Limitation of a Pathname to a Restricted Directory - Resolves: RHEL-173218 - CVE-2026-5405 Heap-based Buffer Overflow - Resolves: RHEL-173221 - CVE-2026-5656 Improper Limitation of a Pathname to a Restricted Directory - Resolves: RHEL-173218 - CVE-2026-5405 Heap-based Buffer Overflow - Resolves: RHEL-152922 - CVE-2026-3203 Buffer Over-read - Resolves: RHEL-152913 - CVE-2026-3201 Improperly Controlled Sequential Memory Allocation - Resolves: RHEL-136919 - NULL Pointer Dereference in Wireshark (CVE-2025-9817) - Resolves: RHEL-130427 - Access of Uninitialized Pointer in Wireshark - Resolves: RHEL-91194 - RFE - Wireshark with LUA support - Resolves: RHEL-80274 - Increasing NVR due to a build error - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2 - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark - Resolves: RHEL-68452 - Buffer Over-read in Wireshark - Resolves: RHEL-152921 - CVE-2026-3203 Buffer Over-read - Resolves: RHEL-152912 - CVE-2026-3201 Improperly Controlled Sequential Memory Allocation - Resolves: RHEL-136916 - NULL Pointer Dereference in Wireshark (CVE-2025-9817) - Resolves: RHEL-130425 - Access of Uninitialized Pointer in Wireshark - Resolves: RHEL-91194 - RFE - Wireshark with LUA support - Resolves: RHEL-80274 - Increasing NVR due to a build error - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2 - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark - Resolves: RHEL-68452 - Buffer Over-read in Wireshark - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Resolves: RHEL-62013 - Improper Handling of Missing Values in Wireshark - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Migrated to SPDX license IDs - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Update to 0.8 - Fix backward compatibility (#2254986) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.7.1. - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix script arguments section - oobe: don't append the user section to /etc/wsl.conf - Add Requires for utilities used in the OOBE script - oobe: wait for cloud-init to finish - oobe: message for enabled cloud-init - oobe: exit early for cloud-init - Change /usr/lib/wsl-distribution.conf to a ghost file - Make wsl-setup a script - Dynamically set DefaultName on package install - Expand variations for default_name - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to wsmancli-2.6.2 - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Replace obsolete getpass function - another release bump - clean up test - Related: RHEL-64018 - yet one more release bump - port test - Related: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - one more release bump - yet another release bump - release bump - updated to 4.3ga8(RHEL-24052) - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - updated to 4.3ga4(#2244223) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebuild for regexp update - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Remove proprietary data from source RPM - Resolves: RHEL-40364 - Update to upstream version 2.7.3 - Remove alternatives post striplet - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update 1.4.23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.4.22 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update 1.4.23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 1.4.22 - migrated to SPDX license - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.4.1. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.1.4. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.1.4. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.4.1. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.4.1. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.4.1. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.3.10. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.3.10. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.4.2. - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 0.1.5 (rhbz#2229713) - Fix D-Bus disconnection when an object path was overly long - Update to 0.1.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update xdg-native-messaging-proxy to upstream 0.1.0 release - Update to 1.20.0 - Update to 1.19.2 - Fix camera portal rejecting camera permission request - Update to 1.19.1 - Bump release for October 2024 mass rebuild: - Bump release for June 2024 mass rebuild - Add gating.yaml via API - Update to 1.18.4 - Migrate to SPDX license - Bump version to 47.3 - Update to 47.2 - Upgrade to 46.2 - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Drop i686 in RHEL 10 - Backport upstream patch for GCC 14 compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 45.1 - Bump version to 1.15.3 - Bump release for October 2024 mass rebuild: - Add gating.yaml via API - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Make i686 exclusion for RHEL only - Re-enable i686 This is not a leaf package. Removing i686 affects too many other packages. - Exclude i686 - Update to 1.15.1 (#2245495) - Update to 1.15.0 - Switch to the meson build system - Backport patches to install systemd units to fix initialization races Resolves: RHEL-79119 - Fix minor spec formatting inconsistencies - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.11 (#2135328) - Fix syntax (RHEL-65632) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Release to 1.2.0 final - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 1.2.0~ git snapshot - Upstream version bump - Upstream version bump - Drop upstreamed patch - Upstream version bump - Add annocheck exceptions for BPF objects (Felix) - Re-enable debug builds (Felix) - Add libcap-ng-devel to BuildDepends - Upstream version bump - Fix build with Clang 20 - Upstream version bump - Upstream version bump - Upstream version bump - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove BR on java-devel - Bump release for Aug 2024 java mass rebuild - Remove post scriptlet for alternatives - Fix incorrect permissions of xerces-j2-samples.jar - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Build with default Java - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebase to upstream version v6.16 - Related: RHEL-120641 - xfs unrepairable filesystem if directory block not junked in phase 3 - Related: RHEL-89682 - Update to the latest upstream version - Related: rhbz#2319902 - Add missing directories to RPM database - Related: rhbz#2279737 - Rebase to upstream version 6.6.0 - Related: rhbz#2262783 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to upstream version v6.16 - Related: RHEL-120641 - xfs unrepairable filesystem if directory block not junked in phase 3 - Related: RHEL-89682 - Update to the latest upstream version - Related: rhbz#2319902 - Add missing directories to RPM database - Related: rhbz#2279737 - Rebase to upstream version 6.6.0 - Related: rhbz#2262783 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuild for ICU 74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Replace inet_aton() with inet_pton() to silence rpminspect - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - add xgettext to build requires - xhost 1.0.9 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update license tag to the SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Correct License: tag and migrate to SPDX - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - xkbcomp 1.4.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration: add SPDX license entries - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - xkbcomp 1.4.6 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - xkeyboard-config 2.41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - xkeyboard-config 2.40 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - xkeyboard-config 2.39 - xkeyboard-config 2.38 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - xkeyboard-config 2.41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - xkeyboard-config 2.40 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - xkeyboard-config 2.39 - xkeyboard-config 2.38 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update license tag to the SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Fix license field - Resolves: RHEL-53194 - Switch Java compiler source/target to 1.8 - Resolves: RHEL-52706 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating tests - Resolves: RHEL-46771 Rebase to version 1.2.39 Fix openssl engine dependency Stop building gcrypt and gnutls implementations - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix build with libxml2-2.12.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Resolves: rhbz#2187631 - Cannot load modules/mod_auth_mellon.so Revert to previous version - Resolves: rhbz#2186304 - rebase to version 1.3.0 - migrated to SPDX license - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating tests - Resolves: RHEL-46771 Rebase to version 1.2.39 Fix openssl engine dependency Stop building gcrypt and gnutls implementations - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix build with libxml2-2.12.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Resolves: rhbz#2187631 - Cannot load modules/mod_auth_mellon.so Revert to previous version - Resolves: rhbz#2186304 - rebase to version 1.3.0 - migrated to SPDX license - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Add gating tests - Resolves: RHEL-46771 Rebase to version 1.2.39 Fix openssl engine dependency Stop building gcrypt and gnutls implementations - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix build with libxml2-2.12.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Resolves: rhbz#2187631 - Cannot load modules/mod_auth_mellon.so Revert to previous version - Resolves: rhbz#2186304 - rebase to version 1.3.0 - migrated to SPDX license - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove docbook5-schemas BuildRequire dependency as it is being deprecated - Related: RHEL-45566 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update license tag to the SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Apply upstream patches to support building in stricer C99 mode - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update license tag to the SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Apply upstream patches to support building in stricer C99 mode - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update license tag to the SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Apply upstream patches to support building in stricer C99 mode - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - font-utils 1.4.1 with sources this time - font-utils 1.4.1 - SPDX migration: update to SPDX-compatible license terms - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - xorgproto 2024.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX Migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - xorgproto 2023.2 - xorgproto 2023.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184290 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolves: https://redhat.atlassian.net/browse/RHEL-182443 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163189 Resolves: https://redhat.atlassian.net/browse/RHEL-163285 Resolves: https://redhat.atlassian.net/browse/RHEL-163243 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-169767 - Rebuild against xorg-x11-xtrans-devel 1.6.0-1 Resolves: RHEL-117512 - Rebase to Xwayland 24.1.9 (RHEL-120264) - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012), CVE-2025-62231 (RHEL-125005) - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135), CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147), CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159) Rebuild for 10.0.z required due to issue when releasing original erratum. - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505), CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511), CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512), CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516) - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505), CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511), CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512), CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516) - CVE fix for: CVE-2026-55999, CVE-2026-56000 Resolves: https://redhat.atlassian.net/browse/RHEL-191523 Resolves: https://redhat.atlassian.net/browse/RHEL-191533 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184290 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolves: https://redhat.atlassian.net/browse/RHEL-182443 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163189 Resolves: https://redhat.atlassian.net/browse/RHEL-163285 Resolves: https://redhat.atlassian.net/browse/RHEL-163243 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-169767 - Rebuild against xorg-x11-xtrans-devel 1.6.0-1 Resolves: RHEL-117512 - Rebase to Xwayland 24.1.9 (RHEL-120264) - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012), CVE-2025-62231 (RHEL-125005) - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135), CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147), CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159) Rebuild for 10.0.z required due to issue when releasing original erratum. - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505), CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511), CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512), CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516) - CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516 CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-93521, CVE-2026-93522, CVE-2026-93523, CVE-2026-93524, CVE-2026-93536 Resolves: https://redhat.atlassian.net/browse/RHEL-277865 Resolves: https://redhat.atlassian.net/browse/RHEL-277833 Resolves: https://redhat.atlassian.net/browse/RHEL-275766 Resolves: https://redhat.atlassian.net/browse/RHEL-276860 Resolves: https://redhat.atlassian.net/browse/RHEL-276244 Resolves: https://redhat.atlassian.net/browse/RHEL-276400 Resolves: https://redhat.atlassian.net/browse/RHEL-277874 Resolves: https://redhat.atlassian.net/browse/RHEL-277872 Resolves: https://redhat.atlassian.net/browse/RHEL-277853 - CVE fix for: CVE-2026-55999, CVE-2026-56000 Resolves: https://redhat.atlassian.net/browse/RHEL-191518 Resolves: https://redhat.atlassian.net/browse/RHEL-191517 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184290 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolves: https://redhat.atlassian.net/browse/RHEL-182443 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163189 Resolves: https://redhat.atlassian.net/browse/RHEL-163285 Resolves: https://redhat.atlassian.net/browse/RHEL-163243 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-169767 - Rebuild against xorg-x11-xtrans-devel 1.6.0-1 Resolves: RHEL-117512 - Rebase to Xwayland 24.1.9 (RHEL-120264) - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012), CVE-2025-62231 (RHEL-125005) - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135), CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147), CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159) - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163190 Resolves: https://redhat.atlassian.net/browse/RHEL-163286 Resolves: https://redhat.atlassian.net/browse/RHEL-163244 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-169759 - Rebuild against xorg-x11-xtrans-devel 1.6.0-1 Resolves: RHEL-117512 - Rebase to Xwayland 24.1.9 (RHEL-120264) - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012), CVE-2025-62231 (RHEL-125005) - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135), CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147), CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159) Rebuild for 10.0.z required due to issue when releasing original erratum. - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505), CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511), CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512), CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516) - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505), CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511), CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512), CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516) - xwayland 24.1.5 (RHEL-78562) - Fix a regression with keyboard modifiers due to a bug in gamescope - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Upgrade to 1.5.6 (#2216134) - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - xprop 1.2.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - SPDX migration - xrdb 1.2.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - migrated to SPDX license - xrestop 0.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to version 389 - Resolves: rhbz#2256390 - Fix C compatibility issue in the configure script (#2251945) - Add licenses to fully conform to SPDX - Rebase to version 388 - Resolves: rhbz#2242865 - Rebase to version 385 - Resolves: rhbz#2241681 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebase to version 384 - Resolves: rhbz#2221827 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebase to version 389 - Resolves: rhbz#2256390 - Fix C compatibility issue in the configure script (#2251945) - Add licenses to fully conform to SPDX - Rebase to version 388 - Resolves: rhbz#2242865 - Rebase to version 385 - Resolves: rhbz#2241681 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebase to version 384 - Resolves: rhbz#2221827 - Fix typo in version number (RHEL-60056) - Backport fix for XDG dirs and compositor timeout (RHEL-60056) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Backport fix for waitpid errors (RHEL-46355) - Suggest mutter since this is the default compositor - Update to 0.0.4 - Require xorg-x11-xauth and dbus-daemon - Use mutter as default compositor if none is specified - Bump release for June 2024 mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Refresh kwin support patch with final version - Refresh kwin support patch - Add provides for other included utilities - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution during C omni-completion - RHEL-194059 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() - RHEL-191359 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192105 CVE-2026-57456 vim: possible code execution with python complete - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave() - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-44652 vim-9.1.083-1.el10: RHEL SAST Automation: address 4 High impact true positive(s) - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215658 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-242467 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-241032 CVE-2026-73077 vim: arbitrary code execution via keyword lookup - RHEL-240373 CVE-2026-73078 vim: code injection in netrw via bookmarks - Resolves: RHEL-242103 CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution during C omni-completion - RHEL-271045 ex command injection via crafted filename in sign_jump() - RHEL-257016 CVE-2026-73073 arbitrary Ex command execution during C omni-completion - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215683 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215658 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-242467 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-241032 CVE-2026-73077 vim: arbitrary code execution via keyword lookup - RHEL-240373 CVE-2026-73078 vim: code injection in netrw via bookmarks - Resolves: RHEL-242103 CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-44652 vim-9.1.083-1.el10: RHEL SAST Automation: address 4 High impact true positive(s) - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-145868 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial - rebuilt with new GCC to fix RHEL-74127 - RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave() - RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin - RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim - Fix: heap-use-after-free bug in threaded .xz decoder (CVE-2025-31115) - Resolves: RHEL-86029 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - finish SPDX license conversion (RHEL-46960) - Update to https://github.com/tukaani-project/xz/releases/tag/v5.6.2 - Resolves: RHEL-43733 - Build package with correct SPDX licence - Bump release for June 2024 mass rebuild - New version 5.4.6 (RHBZ#2260521) - Fix Source URLs. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version 5.4.5 (RHBZ#2247487) - Mark translations of manuals with %lang() - Fix: a buffer overflow in lzma_index_append() - Add test for the issue above (needs a special build config to actually fail -> does not fail in our environemnt) - Resolves: CVE-2026-34743 - Fix: heap-use-after-free bug in threaded .xz decoder (CVE-2025-31115) - Resolves: RHEL-86029 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Switch Java compiler source/target to 1.8 - Resolves: RHEL-52708 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Fix: heap-use-after-free bug in threaded .xz decoder (CVE-2025-31115) - Resolves: RHEL-86029 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - finish SPDX license conversion (RHEL-46960) - Update to https://github.com/tukaani-project/xz/releases/tag/v5.6.2 - Resolves: RHEL-43733 - Build package with correct SPDX licence - Bump release for June 2024 mass rebuild - New version 5.4.6 (RHBZ#2260521) - Fix Source URLs. - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - New version 5.4.5 (RHBZ#2247487) - Mark translations of manuals with %lang() - Fix: a buffer overflow in lzma_index_append() - Add test for the issue above (needs a special build config to actually fail -> does not fail in our environemnt) - Resolves: CVE-2026-34743 - Fix: heap-use-after-free bug in threaded .xz decoder (CVE-2025-31115) - Resolves: RHEL-86029 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Initial commit on c10s - Resolves: RHEL-60383 - Add URL handler to open help files in web browser Resolves: RHEL-76398 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for June 2024 mass rebuild - Build for the SPDX license format change - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Update license and move it to SPDX license format - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Bump release - Bump release for rebuild - Update yggdrasil to 0.4.9 - Remove gomodulemode export from spec file - Update yggdrasil to 0.4.8 - Enable tier1 functional gating tests - Update yggdrasil to 0.4.7 - Update yggdrasil to 0.4.6 - Create rhcd.service sym link to yggdrasil.service - Update to 0.4.5 (RHEL-77619) - Rebuild yggdrasil against updated golang - Update yggdrasil to 0.4.9.2 - Update yggdrasil to 0.4.9.1 - Bump release for rebuild - Bump release for rebuild - Bump release for rebuild - Bump release for rebuild - Update yggdrasil to 0.4.9 - Remove gomodulemode export from spec file - Update yggdrasil to 0.4.8 - Rebuild yggdrasil against updated golang - Rebuild yggdrasil against updated golang - Update yggdrasil to 0.4.9.2 - Update yggdrasil to 0.4.9.1 - Bump release for rebuild - Bump release for rebuild - Bump release for rebuild - Bump release for rebuild - Update yggdrasil to 0.4.9 - Remove gomodulemode export from spec file - Update yggdrasil to 0.4.9.2 - Update yggdrasil to 0.4.9.1 - Bump release for rebuild - Bump release for rebuild - Bump release for rebuild - Bump release for rebuild - Update yggdrasil to 0.4.9 - Remove gomodulemode export from spec file - Update yggdrasil to 0.4.8 - Enable tier1 functional gating tests - Bump release - Bump release for rebuild - Bump release for rebuild - Bump release for October 2024 mass rebuild: - Bump release to rebuild. - Update to 0.2.3 (RHEL-58739) - Drop gopkg macros - Bump release for June 2024 mass rebuild - Rebuild against updated golang - Bump release for rebuild - Bump release for rebuild - Bump release for rebuild - Bump release for rebuild - Bump release for October 2024 mass rebuild: - Bump release to rebuild. - Update to 0.2.3 (RHEL-58739) - Bump release for rebuild - Bump release for rebuild - Bump release for rebuild - Bump release for rebuild - Bump release for October 2024 mass rebuild: - Bump release to rebuild. - Update to 0.2.3 (RHEL-58739) - Drop gopkg macros - Bump release for June 2024 mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Remove xvfb dependency (RHEL-36645) - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 4.0.1 - Update to 4.0.0 - Update to 3.99.91 - Update to 3.99.90 - Update to 3.99.2 - Update to 3.99.1 - Enable DFLTCC on s390x - Resolves: RHEL-135504 - Bump release for October 2024 mass rebuild: - Add ci.fmf - Add gating configuration - Bump release for June 2024 mass rebuild - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Regenerate with rust2rpm v24 - Use vendored dependency in RHEL builds - Rebuild for fixed frame pointer compiler flags in Rust RPM macros - Bump release for October 2024 mass rebuild: - Add ci.fmf - Add gating configuration - Bump release for June 2024 mass rebuild - Update Rust macro usage - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Regenerate with rust2rpm v24 - Use vendored dependency in RHEL builds - Rebuild for fixed frame pointer compiler flags in Rust RPM macros - Fix directory traversal in unzip binary - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github - Resolves: RHEL-105822 - Rebase to 0.13.78 - Related: RHEL-45367 - Related: RHEL-45372 - Bump the release number to trigger the gating tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Refresh the gating tests + bump the release number - Add gating tests + bump the release number - Rebase to 0.13.74 - Resolves: RHEL-34805 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix directory traversal in unzip binary - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github - Resolves: RHEL-105822 - Rebase to 0.13.78 - Related: RHEL-45367 - Related: RHEL-45372 - Bump the release number to trigger the gating tests - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Refresh the gating tests + bump the release number - Add gating tests + bump the release number - Rebase to 0.13.74 - Resolves: RHEL-34805 - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild